{"resultsPerPage":2000,"startIndex":0,"totalResults":2073,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-13T10:58:38.959","vulnerabilities":[{"cve":{"id":"CVE-2016-8491","sourceIdentifier":"psirt@fortinet.com","published":"2017-02-01T17:59:00.153","lastModified":"2026-06-17T00:54:27.063","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell."},{"lang":"es","value":"La presencia de una cuenta embebida llamada 'core' en Fortinet FortiWLC permite a atacantes obtener acceso de lectura/escritura no autorizado a través de una shell remota."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLC","versions":[{"version":"7.0-9-1","status":"affected"},{"version":"7.0-10-0","status":"affected"},{"version":"8.1-2-0","status":"affected"},{"version":"8.1-3-2","status":"affected"},{"version":"8.2-4-0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:N","baseScore":9.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:13.770072Z","id":"CVE-2016-8491","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:fortinet:fortiwlc:7.0-9-1:*:*:*:*:*:*:*","matchCriteriaId":"A842B7E0-7B16-4872-B18E-C05F30CD72CB"},{"vulnerable":true,"criteria":"cpe:2.3:h:fortinet:fortiwlc:7.0-10-0:*:*:*:*:*:*:*","matchCriteriaId":"7EBCE7F9-9DA6-40BD-9266-FCF0846B6280"},{"vulnerable":true,"criteria":"cpe:2.3:h:fortinet:fortiwlc:8.1-2-0:*:*:*:*:*:*:*","matchCriteriaId":"41B97F50-3CE8-48F8-B24A-4AA79C255C8F"},{"vulnerable":true,"criteria":"cpe:2.3:h:fortinet:fortiwlc:8.1-3-2:*:*:*:*:*:*:*","matchCriteriaId":"4E60189C-EE4B-4910-BD58-35AB93482F0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:fortinet:fortiwlc:8.2-4-0:*:*:*:*:*:*:*","matchCriteriaId":"CA834964-1568-48B9-9828-32C6109597B1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/94186","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-16-065","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/94186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-16-065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-8492","sourceIdentifier":"psirt@fortinet.com","published":"2017-02-08T16:59:00.260","lastModified":"2026-06-17T00:54:27.170","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPSec/TLS decryption."},{"lang":"es","value":"La implementación de un ANSI X9.31 RNG en Fortinet FortiGate permite a atacantes obtener acceso de lectura no autorizada a los datos manejados por el dispositivo a través de descifrado IPSec/TLS."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiGate","versions":[{"version":"Before 5.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:01:01.094290Z","id":"CVE-2016-8492","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.18","matchCriteriaId":"A91AE7E3-D33B-4235-916E-D4400595809B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"DACF637E-FB3C-4FE5-B7EA-40D4DD891A67"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"B75D8F35-830C-498C-B658-AE89154BEB8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:4.3.12:*:*:*:*:*:*:*","matchCriteriaId":"D6CBC65E-6DF2-406D-9037-897218AB9257"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"0AB85DAD-03EA-4B16-8FF8-F02ACEF0EE1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:4.3.14:*:*:*:*:*:*:*","matchCriteriaId":"A97B341D-3B9D-4D37-8D5B-6062BE1C3AC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:4.3.15:*:*:*:*:*:*:*","matchCriteriaId":"720D70D8-9B45-4395-8989-B90884389D85"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:4.3.16:*:*:*:*:*:*:*","matchCriteriaId":"5E6E8681-0D3F-46ED-8B84-59E07FBB0F16"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:4.3.17:*:*:*:*:*:*:*","matchCriteriaId":"A93B8A3E-BB55-46EF-B48C-E425A7A71C8B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/94480","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-16-067","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/94480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-16-067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-8494","sourceIdentifier":"psirt@fortinet.com","published":"2017-02-09T15:59:01.283","lastModified":"2026-06-17T00:54:27.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a new webui theme."},{"lang":"es","value":"Verificación insuficiente de archivos cargados permite a atacantes con privilegios de administradores de webui realizar ejecución de código arbitrario cargando un nuevo tema webui."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet Connect","versions":[{"version":"14.2","status":"affected"},{"version":"14.10","status":"affected"},{"version":"15.10","status":"affected"},{"version":"16.7","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:04:13.154893Z","id":"CVE-2016-8494","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:connect:14.2:*:*:*:*:*:*:*","matchCriteriaId":"6F6A7374-89AD-4F0A-855A-29E82C9BC736"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:connect:14.10:*:*:*:*:*:*:*","matchCriteriaId":"F52070E3-DFCA-48F6-9940-4B1EAE4F5626"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:connect:15.10:*:*:*:*:*:*:*","matchCriteriaId":"D776582A-A420-4C07-9CEB-DBD45E756C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:connect:16.7:*:*:*:*:*:*:*","matchCriteriaId":"F0A01D26-A24D-4A21-BD30-C613C4F93E97"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/96159","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/advisory/FG-IR-16-080","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/96159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://fortiguard.com/advisory/FG-IR-16-080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-8495","sourceIdentifier":"psirt@fortinet.com","published":"2017-02-13T15:59:00.167","lastModified":"2026-06-17T00:54:27.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecto en Fortinet FortiManager 5.0.6 hasta la versión 5.2.7 y 5.4.0 hasta la versión 5.4.1 permite a atacantes remotos suplantar una entidad de confianza utilizando un ataque man-in-the-middle (MITM) a través de la funcionalidad de sondeo de dispositivos Fortisandbox."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","versions":[{"version":"5.0.6 to 5.2.7","status":"affected"},{"version":"5.4.0 to 5.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:04:11.896573Z","id":"CVE-2016-8495","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"83ADE078-F9B6-4E46-89AB-F9DE3A2EAF06"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A5DF6CBD-E8D8-40B7-9512-CD739D6FA918"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"42304E1B-C9BF-4CCE-A5C7-4FAC7E4C87E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"34B83D3F-23C8-4781-887C-1876B103A4B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BC2F75CB-BC6D-434A-84C8-6290F4B6E8B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"AB152570-F07F-4706-9717-D31F5F31CDE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C2A3410C-E673-49C1-AA2C-2BD77C68DCA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6AFEA22C-D661-4859-86CE-329D23E3EF87"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7D9B23B1-A527-49B6-A6CB-CFFCF278B70E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72523D47-A6FA-48E8-B2D0-3563027CE35C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7FE6366D-0535-4681-90F7-3AB9386184A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0F5BBE82-1D71-40EE-B506-1DD1066F537C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F1A2A3F2-A908-4192-8032-F8FA3310B50A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0B621447-97C3-42B4-92FF-3D5BEDE26A2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8A9B31D5-E000-4378-A030-D3B47C6D1740"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8CF01200-2392-43E7-9682-80CF1A235409"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C235585-4228-43B3-B2BB-06563B67F9E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B760F3B0-C81A-4B53-8D1E-384834D4A594"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/96157","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037805","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/advisory/FG-IR-16-055","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/96157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://fortiguard.com/advisory/FG-IR-16-055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7541","sourceIdentifier":"psirt@fortinet.com","published":"2017-03-30T14:59:00.150","lastModified":"2026-06-17T00:53:13.223","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected."},{"lang":"es","value":"Las sesiones de larga duración en dispositivos Fortinet FortiGate con FortiOS 5.x en versiones anteriores a 5.4.0 podría violar una política de seguridad durante las actualizaciones de firmas IPS cuando el IPSengine de FortiGate está configurado en modo de flujo. Todas las versiones FortiGate con IPS configurado en modo proxy (el modo predeterminado) no están afectadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","versions":[{"version":"5.0.x, 5.2.x","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:59.214273Z","id":"CVE-2016-7541","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1E542BE2-14FC-4BA8-890C-7DA81F33F032"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D8A5EC4-CE2C-4174-9F09-361B8D153AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C3BABC91-F9BF-4B52-BDBF-F9617ABCAC9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9C172379-F6BA-4343-831A-62004E742C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"516597D9-086E-4668-A40B-473F38125F92"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D62F480B-D8CA-4F5C-8034-C0AE73F26B67"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F435F408-EC5B-42A0-9E3C-4DE5D702ACAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"823C8357-E638-4EAE-B231-3B60263FFE52"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1C6615C7-C6F8-4E42-BA09-5A29A0B68E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B24C5917-BBC0-4924-9FB0-49E141DC9D54"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"513A1CAA-9B87-4CF5-9513-396E2E686CDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"62CD94B3-C430-4672-BBEA-B8A542944F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"91AA2061-5D28-4DCF-9126-8D5CE57D96F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A1FA9832-A573-489B-A26E-7A7DFC1E0D6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2FC836E7-DAA2-4FDB-9919-D5FF35E67C4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E627C59-7C16-44F0-800D-A2E8A766B26D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"233236FA-BB13-4261-BE2E-3E617406DC53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27844CC9-498B-4A65-91AC-AC130222EE5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"27B4C672-7ED5-4113-87AE-5774D1263C0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"05CB7A90-91BC-49AF-9B5C-EBD212484C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"864D3221-177B-43CE-BD7D-CB14A110268E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"31C186D6-6AC5-49EB-A701-C91358B4A25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAC9F6C4-F887-4F25-87BD-383F6CF39806"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F8558962-7A19-4F4A-BED0-9CB5D4CFC422"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"EC63D521-EC88-4B13-BC73-3284F3FCF3A4"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/FG-IR-16-088","source":"psirt@fortinet.com","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/94477","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://fortiguard.com/advisory/FG-IR-16-088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/94477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-7542","sourceIdentifier":"psirt@fortinet.com","published":"2017-03-30T14:59:00.197","lastModified":"2026-06-17T00:53:13.343","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to crack them."},{"lang":"es","value":"Un administrador de sólo lectura en dispositivos Fortinet con FortiOS 5.2.x en versiones anteriores a 5.2.10 GA y FortiOS 5.4.x en versiones anteriores a 5.4.2 GA puede tener acceso de lectura-escritura a hashes de contraseñas de administradores (no incluyendo super-admins), almacenados en el dispositivo a través de la API Rest webui, y puede por lo tanto ser capaz de romperlo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","versions":[{"version":"5.2.0 - 5.2.9, 5.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:57.607119Z","id":"CVE-2016-7542","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E627C59-7C16-44F0-800D-A2E8A766B26D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"233236FA-BB13-4261-BE2E-3E617406DC53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27844CC9-498B-4A65-91AC-AC130222EE5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"27B4C672-7ED5-4113-87AE-5774D1263C0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"05CB7A90-91BC-49AF-9B5C-EBD212484C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"864D3221-177B-43CE-BD7D-CB14A110268E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"31C186D6-6AC5-49EB-A701-C91358B4A25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAC9F6C4-F887-4F25-87BD-383F6CF39806"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F8558962-7A19-4F4A-BED0-9CB5D4CFC422"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1668AE14-D9A4-4B7D-BC3F-75885792875A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/FG-IR-16-050","source":"psirt@fortinet.com","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/94690","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037394","source":"psirt@fortinet.com"},{"url":"http://fortiguard.com/advisory/FG-IR-16-050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.securityfocus.com/bid/94690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2017-3125","sourceIdentifier":"psirt@fortinet.com","published":"2017-04-12T15:59:00.160","lastModified":"2026-06-17T01:17:33.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker."},{"lang":"es","value":"Una vulnerabilidad XSS no autenticada con FortiMail 5.0.0 - 5.2.9 y 5.3.0 - 5.3.8 podría permitir a un atacante ejecutar secuencias de comandos arbitrarias en el contexto de seguridad del navegador de una víctima registrada en FortiMail, asumiendo que la víctima ha sido manipulada mediante ingeniería social para hacer clic en una URL manipulada por el atacante."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","versions":[{"version":"5.0.0 -> 5.2.9, 5.3.0 -> 5.3.8","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:55.634219Z","id":"CVE-2017-3125","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFA17336-50C1-404F-92E4-8107CFAB4D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6386E32B-365F-4DC8-AA77-14579BB84CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6A7FD9C8-F970-4949-B497-01FB3C1A2C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"90956836-650E-45B3-8BFE-46AD5FBC484E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2B901768-B13B-456F-9909-E19103A5CAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D819B2A1-0A5C-45E7-A4B6-395670EFE0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EC9DB8EF-E990-429A-839C-9E178DA92A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.1:*:*:*:*:*:*:*","matchCriteriaId":"3E5B9F82-F87C-47E1-AA75-1B7F001CC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"863EAA3C-B10D-4211-BAD9-1CFA91F820AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"24F47A35-CC2A-4908-B678-FACD619EDDE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"82039A31-FE0C-4460-B669-9FE766B47D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"549EE473-3B98-4458-BCA2-D0B14BFFDE37"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5F946FB0-E890-41C3-BFDC-D7734CE3DDF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CE2C95E3-0E29-49D9-A9ED-657BC2B05CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"73CF2645-2997-4939-B9C0-D7A42ECAFEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0B4D9FF8-64D0-4EF3-A165-C86A68B36BE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1A6699A9-6EBD-42B9-87E8-AF4D3A124679"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1AF5984C-2DD3-486F-96F3-B248B4ED0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"CED77E9D-0865-4BCE-B28B-222971AD198A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A21B130-63A1-459B-A726-B47643A02AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1F85C06C-2EFE-404B-9DB0-A9FC3B307BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"7B3885FE-A0FE-4204-A7C3-2E339B430D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3:*:*:*:*:*:*:*","matchCriteriaId":"21E004F2-4B2D-4BB7-9B37-CB4E00B7EA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"0B586E3F-520C-4842-A18C-C2F44E747569"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0CD12406-E31F-416E-B65A-1486B5E9F86E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F1EF9338-DEB2-4F15-B26B-48B3D7D08659"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5421E516-3C05-409F-B6D8-6215223EBB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"39660F44-9613-496D-BA2B-1FFAB528B6DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"6909D1FB-6E23-4CE6-BA70-F2109ACACCD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"1A724687-46DC-4CE3-A11E-45D504C97907"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"F2A7E80F-DA0D-4A6B-937E-292E02611FE1"}]}]}],"references":[{"url":"http://fortiguard.com/psirt/FG-IR-17-011","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/97474","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://fortiguard.com/psirt/FG-IR-17-011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/97474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2014-2215","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-11T14:29:34.637","lastModified":"2023-11-07T02:19:31.617","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2014-3140","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-11T14:29:34.903","lastModified":"2023-11-07T02:19:42.757","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2016-5125","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-11T14:30:06.860","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2016-8499","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-11T14:30:15.547","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2016-8500","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-11T14:30:15.563","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2017-3128","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-23T17:29:00.193","lastModified":"2026-06-17T01:17:34.317","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter."},{"lang":"es","value":"Una vulnerabilidad tipo XSS (Cross-Site-Scripting) almacenado en FortiOS de Fortinet, permite a los atacantes ejecutar código o comandos no autorizados por medio del parámetro policy global-label."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"5.0.0-5.0.14, 5.2.0-5.2.10","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:54.112191Z","id":"CVE-2017-3128","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1E542BE2-14FC-4BA8-890C-7DA81F33F032"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D8A5EC4-CE2C-4174-9F09-361B8D153AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C3BABC91-F9BF-4B52-BDBF-F9617ABCAC9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9C172379-F6BA-4343-831A-62004E742C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"516597D9-086E-4668-A40B-473F38125F92"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D62F480B-D8CA-4F5C-8034-C0AE73F26B67"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F435F408-EC5B-42A0-9E3C-4DE5D702ACAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"823C8357-E638-4EAE-B231-3B60263FFE52"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1C6615C7-C6F8-4E42-BA09-5A29A0B68E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B24C5917-BBC0-4924-9FB0-49E141DC9D54"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"513A1CAA-9B87-4CF5-9513-396E2E686CDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"62CD94B3-C430-4672-BBEA-B8A542944F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"91AA2061-5D28-4DCF-9126-8D5CE57D96F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A1FA9832-A573-489B-A26E-7A7DFC1E0D6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2FC836E7-DAA2-4FDB-9919-D5FF35E67C4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E627C59-7C16-44F0-800D-A2E8A766B26D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"233236FA-BB13-4261-BE2E-3E617406DC53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27844CC9-498B-4A65-91AC-AC130222EE5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"27B4C672-7ED5-4113-87AE-5774D1263C0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"05CB7A90-91BC-49AF-9B5C-EBD212484C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"864D3221-177B-43CE-BD7D-CB14A110268E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"31C186D6-6AC5-49EB-A701-C91358B4A25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAC9F6C4-F887-4F25-87BD-383F6CF39806"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F8558962-7A19-4F4A-BED0-9CB5D4CFC422"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"EC63D521-EC88-4B13-BC73-3284F3FCF3A4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/98514","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038541","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/psirt/FG-IR-17-057","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://fortiguard.com/psirt/FG-IR-17-057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-8496","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-27T00:29:00.613","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2016-8497","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-27T00:29:00.940","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2017-3126","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-27T00:29:00.973","lastModified":"2026-06-17T01:17:34.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the next parameter."},{"lang":"es","value":"Una vulnerabilidad de Redireccionamiento Abierto en FortiAnalyzer versiones desde 5.4.0 hasta 5.4.2 y FortiManager versiones desde 5.4.0 hasta 5.4.2 de Fortinet, permite a un atacante ejecutar código o comandos no autorizados por medio del parámetro next."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiAnalyzer, FortiManager","versions":[{"version":"FortiAnalyzer 5.4.2, 5.4.1, 5.4.0","status":"affected"},{"version":"FortiManager 5.4.2, 5.4.1, 5.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:52.755671Z","id":"CVE-2017-3126","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EC123643-C9EE-40BF-B6F5-CE942F0A474E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EDBCBC4B-ECCB-467D-8CB1-D017C5DCB3D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B9CD11DF-36F4-4761-92AC-5F01F965B02A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C235585-4228-43B3-B2BB-06563B67F9E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B760F3B0-C81A-4B53-8D1E-384834D4A594"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"43BF2F41-32BB-4C64-A9A2-62FB61B7D318"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/98557","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038539","source":"psirt@fortinet.com"},{"url":"http://www.securitytracker.com/id/1038540","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/psirt/FG-IR-17-014","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1038540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://fortiguard.com/psirt/FG-IR-17-014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-3129","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-27T00:29:01.020","lastModified":"2026-06-17T01:17:34.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Scripting en FortiWeb, versiones 5.7.1 y anteriores de Fortinet, permite a un atacante ejecutar código o comandos no autorizados por medio de un parámetro POST saneado inapropiadamente en la funcionalidad FortiWeb Site Publisher."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb versions 5.7.1 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:51.062307Z","id":"CVE-2017-3129","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.1","matchCriteriaId":"17A29045-7C4B-4006-8855-38310732DB8B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/98382","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-076","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-3134","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-27T00:29:01.067","lastModified":"2026-06-17T01:17:35.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'."},{"lang":"es","value":"\"Una vulnerabilidad de escalada de privilegios en FortiWLC-SD versiones 8.2.4 y anteriores de Fortinet, permite al atacante conseguir acceso de root por medio del comando de la CLI 'copy running-config'.\n\""}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiWLC-SD","versions":[{"version":"FortiWLC-SD versions 8.2.4 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:04:10.563072Z","id":"CVE-2017-3134","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiwlc-sd:*:*:*:*:*:*:*:*","versionEndIncluding":"8.2.4","matchCriteriaId":"317DB3E9-64A6-4E40-B7B5-230C6A3B8CCA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/97603","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-097","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/97603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7337","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-27T00:29:01.113","lastModified":"2026-06-17T01:24:09.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion request."},{"lang":"es","value":"Una vulnerabilidad de Control de Acceso inapropiada en FortiPortal versiones 4.0.0 y anteriores de Fortinet, permite a un atacante interactuar con VDOMs no autorizados o enumerar otros ADOM por medio de una sesión robada de otro usuario y tokens CSRF o el parámetro adomName en la petición /fpc/sec/customer/policy/getAdomVersion."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal versions 4.0.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:12.617419Z","id":"CVE-2017-7337","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"F12C46D5-F018-4114-86A5-AF643CFA348C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7338","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-27T00:29:01.147","lastModified":"2026-06-17T01:24:09.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View."},{"lang":"es","value":"Existe una vulnerabilidad en el manejo de contraseñas en Fortinet FortiPortal en versiones anteriores a la 4.0.0 que permite a los atacantes divulgar información mediante FortiAnalyzer Management View."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal versions 4.0.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:10:05.900034Z","id":"CVE-2017-7338","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"F12C46D5-F018-4114-86A5-AF643CFA348C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7339","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-27T00:29:01.190","lastModified":"2026-06-17T01:24:09.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Scripting en FortiPortal versiones 4.0.0 y anteriores de Fortinet, permite a un atacante ejecutar código o comandos no autorizados por medio de las entradas \"Name\" y \"Description\" en la funcionalidad \"Add Revision Backup\"."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal versions 4.0.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:49.246157Z","id":"CVE-2017-7339","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"F12C46D5-F018-4114-86A5-AF643CFA348C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7343","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-27T00:29:01.223","lastModified":"2026-06-17T01:24:10.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter."},{"lang":"es","value":"Una vulnerabilidad de redirección abierta en Fortigate FortiPortal 4.0.0 y posterior permite al atacante ejecutar código no autorizado o comandos a través del parámetro url."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal 4.0.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:47.694564Z","id":"CVE-2017-7343","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"F12C46D5-F018-4114-86A5-AF643CFA348C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7731","sourceIdentifier":"psirt@fortinet.com","published":"2017-05-27T00:29:01.270","lastModified":"2026-06-17T01:25:03.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature."},{"lang":"es","value":"Vulnerabilidad de recuperación de contraseña débil en Fortigate FortiPortal versiones 4.0.0 y siguientes permite al atacante llevar a cabo la divulgación de información a través de la función de contraseña olvidada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal versions 4.0.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:10:04.644674Z","id":"CVE-2017-7731","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-640"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"F12C46D5-F018-4114-86A5-AF643CFA348C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-3127","sourceIdentifier":"psirt@fortinet.com","published":"2017-06-01T14:29:00.187","lastModified":"2026-06-17T01:17:34.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srcintf parameter during Firewall Policy Creation."},{"lang":"es","value":"Una vulnerabilidad de tipo cross-site-scripting en FortiGate versiones 5.2.0 a 5.2.10 de Fortinet, permite al atacante ejecutar código o comandos no autorizados por medio del parámetro srcintf durante la Creación de Políticas de Firewall."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:46.313022Z","id":"CVE-2017-3127","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E627C59-7C16-44F0-800D-A2E8A766B26D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"233236FA-BB13-4261-BE2E-3E617406DC53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27844CC9-498B-4A65-91AC-AC130222EE5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"27B4C672-7ED5-4113-87AE-5774D1263C0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"05CB7A90-91BC-49AF-9B5C-EBD212484C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"864D3221-177B-43CE-BD7D-CB14A110268E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"31C186D6-6AC5-49EB-A701-C91358B4A25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAC9F6C4-F887-4F25-87BD-383F6CF39806"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F8558962-7A19-4F4A-BED0-9CB5D4CFC422"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"EC63D521-EC88-4B13-BC73-3284F3FCF3A4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/98048","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038367","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/psirt/FG-IR-17-017","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://fortiguard.com/psirt/FG-IR-17-017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-8493","sourceIdentifier":"psirt@fortinet.com","published":"2017-06-26T17:29:00.187","lastModified":"2026-06-17T00:54:27.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability."},{"lang":"es","value":"En FortiClientWindows versiones 5.4.1 y 5.4.2, un atacante puede escalar privilegios por medio de una vulnerabilidad de FortiClientNamedPipe."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClient","versions":[{"version":"FortiClient 5.4.2, 5.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:04:09.421939Z","id":"CVE-2016-8493","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:5.4.1:*:*:*:*:windows:*:*","matchCriteriaId":"0FD0D4D0-D8A5-4403-972C-1364688CE435"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:5.4.2:*:*:*:*:windows:*:*","matchCriteriaId":"694E9360-7ADB-46BF-88D1-847A65D19EF3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101682","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-16-095","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-16-095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-8498","sourceIdentifier":"psirt@fortinet.com","published":"2017-06-26T17:29:00.217","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2017-7336","sourceIdentifier":"psirt@fortinet.com","published":"2017-07-22T21:29:00.273","lastModified":"2026-06-17T01:24:09.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgrade' account privileges."},{"lang":"es","value":"Una cuenta codificada denominada “upgrade” en Fortinet FortiWLM versión 8.3.0 y versiones inferiores, permite a un atacante remoto iniciar sesión y ejecutar comandos con privilegios de cuenta “upgrade”."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiWLM","versions":[{"version":"8.3.0 and lower","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:11.226300Z","id":"CVE-2017-7336","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionEndIncluding":"8.3.0","matchCriteriaId":"D3998893-D8ED-427A-AB9F-8C3DD10AD336"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/99351","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-115","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/99351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-3130","sourceIdentifier":"psirt@fortinet.com","published":"2017-08-10T21:29:00.187","lastModified":"2026-06-17T01:17:34.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets."},{"lang":"es","value":"Una vulnerabilidad de divulgación de información en Fortinet FortiOS 5.6.0, 5.4.4 y versiones inferiores permite que un atacante obtenga la información de la versión de FortiOS mediante la inspección de paquetes FortiOS IKE VendorID."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 5.6.0, 5.4.4 and below versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:10:03.405299Z","id":"CVE-2017-3130","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1E542BE2-14FC-4BA8-890C-7DA81F33F032"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0D8A5EC4-CE2C-4174-9F09-361B8D153AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C3BABC91-F9BF-4B52-BDBF-F9617ABCAC9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9C172379-F6BA-4343-831A-62004E742C6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"516597D9-086E-4668-A40B-473F38125F92"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D62F480B-D8CA-4F5C-8034-C0AE73F26B67"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F435F408-EC5B-42A0-9E3C-4DE5D702ACAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"823C8357-E638-4EAE-B231-3B60263FFE52"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1C6615C7-C6F8-4E42-BA09-5A29A0B68E09"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"B24C5917-BBC0-4924-9FB0-49E141DC9D54"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"513A1CAA-9B87-4CF5-9513-396E2E686CDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"62CD94B3-C430-4672-BBEA-B8A542944F66"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"91AA2061-5D28-4DCF-9126-8D5CE57D96F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A1FA9832-A573-489B-A26E-7A7DFC1E0D6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2FC836E7-DAA2-4FDB-9919-D5FF35E67C4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E627C59-7C16-44F0-800D-A2E8A766B26D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"233236FA-BB13-4261-BE2E-3E617406DC53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27844CC9-498B-4A65-91AC-AC130222EE5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"27B4C672-7ED5-4113-87AE-5774D1263C0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"05CB7A90-91BC-49AF-9B5C-EBD212484C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"864D3221-177B-43CE-BD7D-CB14A110268E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"31C186D6-6AC5-49EB-A701-C91358B4A25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAC9F6C4-F887-4F25-87BD-383F6CF39806"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F8558962-7A19-4F4A-BED0-9CB5D4CFC422"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"EC63D521-EC88-4B13-BC73-3284F3FCF3A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1668AE14-D9A4-4B7D-BC3F-75885792875A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"377A2F0B-2A58-4C2C-B546-3178B353484B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"20EBDFD4-45A0-47CC-817E-48E84F945402"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/100211","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-073","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/100211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7737","sourceIdentifier":"psirt@fortinet.com","published":"2017-08-10T21:29:00.233","lastModified":"2026-06-17T01:25:05.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user password in cleartext in webui via the HTML source code."},{"lang":"es","value":"Una vulnerabilidad de revelación de información en Fortinet FortiWeb 5.8.2 y versiones inferiores permite que un usuario administrador con la sesión iniciada tenga acceso a la contraseña de usuario SNMPv3 en formato de texto no cifrado en webui mediante el código fuente HTML."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 5.8.2 and below versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:44.671952Z","id":"CVE-2017-7737","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-552"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndIncluding":"5.8.2","matchCriteriaId":"AC1EF0FC-9272-4D3D-AA07-C0A3669064F0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/100205","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-162","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/100205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-3131","sourceIdentifier":"psirt@fortinet.com","published":"2017-09-12T02:29:00.203","lastModified":"2026-06-17T01:17:34.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in \"Applications\" under FortiView."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Scripting en Fortinet FortiOS desde la versión 5.4.0 hasta la 5.4.4 y la versión 5.6.0 permite que atacantes remotos ejecuten código o comandos sin autorización mediante la entrada de filtro en \"Applications\" en FortiView."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS versions 5.4.0 through 5.4.4 and 5.6.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:43.037539Z","id":"CVE-2017-3131","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1668AE14-D9A4-4B7D-BC3F-75885792875A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"377A2F0B-2A58-4C2C-B546-3178B353484B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"20EBDFD4-45A0-47CC-817E-48E84F945402"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/100009","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039020","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-104","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/42388/","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/100009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/42388/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2017-3132","sourceIdentifier":"psirt@fortinet.com","published":"2017-09-12T02:29:00.233","lastModified":"2026-06-17T01:17:34.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Scripting en Fortinet FortiOS en su versión 5.6.0 y anteriores permite que atacantes remotos ejecuten código o comandos sin autorización mediante la entrada de acción durante la activación de un FortiToken."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS versions 5.6.0 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:41.609477Z","id":"CVE-2017-3132","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.0","matchCriteriaId":"A509FF43-9706-4EC7-B1D0-D3BF0569C9F6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/100009","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039020","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-104","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/42388/","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/100009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/42388/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2017-3133","sourceIdentifier":"psirt@fortinet.com","published":"2017-09-12T02:29:00.310","lastModified":"2026-06-17T01:17:35.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Scripting en Fortinet FortiOS en su versión 5.6.0 y anteriores permite que atacantes remotos ejecuten código o comandos sin autorización mediante el código HTML de los mensajes de reemplazo para SSL-VPN."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS versions 5.6.0 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:40.211296Z","id":"CVE-2017-3133","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.0","matchCriteriaId":"A509FF43-9706-4EC7-B1D0-D3BF0569C9F6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/100009","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039020","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-104","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/42388/","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/100009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/42388/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2017-7734","sourceIdentifier":"psirt@fortinet.com","published":"2017-09-12T02:29:00.373","lastModified":"2026-06-17T01:25:03.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Scripting en Fortinet FortiOS desde la versión 5.4.0 hasta la 5.4.4 permite que atacantes remotos ejecuten código o comandos sin autorización mediante 'Comments' mientras se guardan revisiones de configuración."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS versions 5.4.0 through 5.4.4","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:38.728509Z","id":"CVE-2017-7734","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1668AE14-D9A4-4B7D-BC3F-75885792875A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"377A2F0B-2A58-4C2C-B546-3178B353484B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"20EBDFD4-45A0-47CC-817E-48E84F945402"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/99098","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038705","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-127","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/99098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7735","sourceIdentifier":"psirt@fortinet.com","published":"2017-09-12T02:29:00.420","lastModified":"2026-06-17T01:25:04.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Groups\" input while creating or editing User Groups."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Scripting en Fortinet FortiOS desde la versión 5.2.0 hasta la 5.2.11 y 5.4.0 hasta la 5.4.4 permite que atacantes remotos ejecuten código o comandos sin autorización mediante la entrada \"Groups\" al crear o editar grupos de usuarios."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS versions 5.2.0 through 5.2.11, and 5.4.0 through 5.4.4","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:37.266792Z","id":"CVE-2017-7735","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E627C59-7C16-44F0-800D-A2E8A766B26D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"233236FA-BB13-4261-BE2E-3E617406DC53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27844CC9-498B-4A65-91AC-AC130222EE5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"27B4C672-7ED5-4113-87AE-5774D1263C0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"05CB7A90-91BC-49AF-9B5C-EBD212484C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"864D3221-177B-43CE-BD7D-CB14A110268E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"31C186D6-6AC5-49EB-A701-C91358B4A25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAC9F6C4-F887-4F25-87BD-383F6CF39806"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F8558962-7A19-4F4A-BED0-9CB5D4CFC422"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"EC63D521-EC88-4B13-BC73-3284F3FCF3A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB756AF8-F9D2-472E-867B-C04D11F62FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1668AE14-D9A4-4B7D-BC3F-75885792875A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"377A2F0B-2A58-4C2C-B546-3178B353484B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"20EBDFD4-45A0-47CC-817E-48E84F945402"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/99098","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038705","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-127","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/99098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7335","sourceIdentifier":"psirt@fortinet.com","published":"2017-10-26T13:29:00.277","lastModified":"2026-06-17T01:24:09.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows an authenticated user to inject arbitrary web script or HTML via non-sanitized parameters \"refresh\" and \"branchtotable\" present in HTTP POST requests."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Scripting (XSS) en Fortinet FortiWLC en versiones 6.1-x (6.1-2, 6.1-4 y 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); y 8.x (8.0, 8.1, 8.2 y 8.3.0-8.3.2) permite que un usuario autenticado inyecte scripts web o HTML arbitrarios mediante parámetros \"refresh\" y \"branchtotable\" no sanitizados presentes en peticiones HTTP POST."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:35.698394Z","id":"CVE-2017-7335","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:6.1-2:*:*:*:*:*:*:*","matchCriteriaId":"D87F7FFB-1E43-4CEE-8F5C-85A6F87AF447"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:6.1-4:*:*:*:*:*:*:*","matchCriteriaId":"87D90FE1-EDA4-40F6-ADB0-969CAB8645F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:6.1-5:*:*:*:*:*:*:*","matchCriteriaId":"347BFB74-E014-4C31-B292-08BC6B96B2F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:7.0-7:*:*:*:*:*:*:*","matchCriteriaId":"5C562DA6-693C-4C16-A69A-17293C010D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:7.0-8:*:*:*:*:*:*:*","matchCriteriaId":"5005218E-1CE5-49D9-BBF8-07DC6BDE1E03"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:7.0-9:*:*:*:*:*:*:*","matchCriteriaId":"224292C5-AA1F-4ECE-A89A-08DD0BD5CDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:7.0-10:*:*:*:*:*:*:*","matchCriteriaId":"743234D6-C2B9-4980-969D-C6811142CAE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7E03C8D2-C2DC-42FA-BB60-AAE542646B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.1:*:*:*:*:*:*:*","matchCriteriaId":"0CBAC292-6C47-41BC-92A0-2038280D3FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.2:*:*:*:*:*:*:*","matchCriteriaId":"CE5B0F43-DFFF-4603-AAB3-742F9E9F7ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"138354E5-2281-422B-95D9-879D900DFF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6300548E-1D1B-4F9D-9894-0C4D2906E2A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"28C337BE-93A1-4AC4-87D3-4F620A05AF1B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101287","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-106","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7341","sourceIdentifier":"psirt@fortinet.com","published":"2017-10-26T13:29:00.370","lastModified":"2026-06-17T01:24:10.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos de sistema operativo en la interfaz de usuario web para la descarga de scripts en el punto de acceso al gestor de archivo ene Fortinet FortiWLC, desde la versión 6.1-2 hasta la 6.1-5, desde la 7.0-7 hasta la 7.0-10, la 8.0 hasta la 8.2 y la 8.3.0 hasta la 8.3.2 permite que un usuario administrador autenticado ejecute comandos arbitrarios de la consola del sistema mediante peticiones HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:04:08.221212Z","id":"CVE-2017-7341","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1-2","versionEndIncluding":"6.1-5","matchCriteriaId":"32B5AEE4-D578-49CB-82B8-BB234EC09F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0-7","versionEndIncluding":"7.0-10","matchCriteriaId":"C743E7EB-4C55-482D-B39A-51EF4E1AF19E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndIncluding":"8.2","matchCriteriaId":"6413A393-8FFC-46BC-92F1-DEA776815122"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndIncluding":"8.3.2","matchCriteriaId":"5210AB0C-6778-42D9-8353-ABD2E4C1C2AB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101273","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-119","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7732","sourceIdentifier":"psirt@fortinet.com","published":"2017-10-26T13:29:00.417","lastModified":"2026-06-17T01:25:03.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Scripting (XSS) reflejado en la página de inicio de sesión preautenticación al webmail personalizada de Fortinet FortiMail 5.1 y anteriores, desde la versión 5.2.0 hasta la 5.2.9 y la versión 5.3.0 hasta la 5.3.9 permite que un atacante inyecte scripts web o HTML arbitrarios mediante peticiones HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:33.952833Z","id":"CVE-2017-7732","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2822C6B9-7FD5-4E1B-907B-F324F28A82A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9DB89536-8E1E-4E83-9DFA-C9BFF8B310C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"178BB7DA-C703-40E7-8070-D2D001700585"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"8102D2F0-A12F-4B02-B48A-D7C0790DD3D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFA17336-50C1-404F-92E4-8107CFAB4D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2E85921-4280-44AE-8A94-1158620E9728"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9B65F87F-6896-4DC5-99CC-C900E37ADDAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7A59FA3B-CF8B-4088-A27F-C4939873E552"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C28A60D9-64F5-4DF2-B0FE-3AA4CCD85D13"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6386E32B-365F-4DC8-AA77-14579BB84CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6A7FD9C8-F970-4949-B497-01FB3C1A2C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"90956836-650E-45B3-8BFE-46AD5FBC484E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2B901768-B13B-456F-9909-E19103A5CAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"D819B2A1-0A5C-45E7-A4B6-395670EFE0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EC9DB8EF-E990-429A-839C-9E178DA92A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.1:*:*:*:*:*:*:*","matchCriteriaId":"3E5B9F82-F87C-47E1-AA75-1B7F001CC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5F946FB0-E890-41C3-BFDC-D7734CE3DDF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CE2C95E3-0E29-49D9-A9ED-657BC2B05CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"73CF2645-2997-4939-B9C0-D7A42ECAFEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0B4D9FF8-64D0-4EF3-A165-C86A68B36BE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1A6699A9-6EBD-42B9-87E8-AF4D3A124679"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1AF5984C-2DD3-486F-96F3-B248B4ED0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"CED77E9D-0865-4BCE-B28B-222971AD198A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A21B130-63A1-459B-A726-B47643A02AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1F85C06C-2EFE-404B-9DB0-A9FC3B307BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"7B3885FE-A0FE-4204-A7C3-2E339B430D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3:*:*:*:*:*:*:*","matchCriteriaId":"21E004F2-4B2D-4BB7-9B37-CB4E00B7EA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"0B586E3F-520C-4842-A18C-C2F44E747569"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0CD12406-E31F-416E-B65A-1486B5E9F86E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F1EF9338-DEB2-4F15-B26B-48B3D7D08659"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5421E516-3C05-409F-B6D8-6215223EBB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"39660F44-9613-496D-BA2B-1FFAB528B6DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"6909D1FB-6E23-4CE6-BA70-F2109ACACCD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"1A724687-46DC-4CE3-A11E-45D504C97907"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"F2A7E80F-DA0D-4A6B-937E-292E02611FE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:5.3.9:*:*:*:*:*:*:*","matchCriteriaId":"79A50BAA-4DAC-4435-89D1-F213EE1BA65F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101278","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039584","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-099","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-14182","sourceIdentifier":"psirt@fortinet.com","published":"2017-10-27T13:29:00.217","lastModified":"2026-06-17T01:05:44.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API."},{"lang":"es","value":"Una vulnerabilidad de denegación de servicio (DoS) en Fortinet FortiOS desde la versión 5.4.0 hasta la 5.4.5 permite que un usuario autenticado haga que la interfaz gráfica de usuario web no responda temporalmente, pasando una carga útil especialmente manipulada al parámetro \"params\" de la API web JSON."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:32.114830Z","id":"CVE-2017-14182","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1668AE14-D9A4-4B7D-BC3F-75885792875A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"377A2F0B-2A58-4C2C-B546-3178B353484B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"20EBDFD4-45A0-47CC-817E-48E84F945402"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8C9CDB2B-E454-4B91-9A47-615F31F1A3D5"}]}]}],"references":[{"url":"http://code610.blogspot.com/2017/10/patch-your-fortinet-cve-2017-14182.html","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/101559","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039678","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-206","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://code610.blogspot.com/2017/10/patch-your-fortinet-cve-2017-14182.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/101559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7733","sourceIdentifier":"psirt@fortinet.com","published":"2017-10-27T13:29:00.407","lastModified":"2026-06-17T01:25:03.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote unauthenticated attacker to execute arbitrary javascript code via webUI \"Login Disclaimer\" redir parameter."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Scripting (XSS) en Fortinet FortiOS desde la versión 5.4.0 a la 5.4.5 y en la versión 5.6.0 permite que un atacante remoto no autenticado ejecute código JavaScfript arbitrario mediante el parámetro de redirección \"Login Disclaimer\" en la interfaz gráfica de usuario web."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 5.6.0, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:30.490216Z","id":"CVE-2017-7733","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1668AE14-D9A4-4B7D-BC3F-75885792875A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"377A2F0B-2A58-4C2C-B546-3178B353484B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"20EBDFD4-45A0-47CC-817E-48E84F945402"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8C9CDB2B-E454-4B91-9A47-615F31F1A3D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101563","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039677","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-113","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7739","sourceIdentifier":"psirt@fortinet.com","published":"2017-11-13T14:29:00.947","lastModified":"2026-06-17T01:25:05.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Scripting reflejado en las páginas web de respuesta a mensajes de proxies web en Fortinet FortiOS en versiones 5.6.0, 5.4.0 a la 5.4.5 y la 5.2.0 a la 5.2.11 permite que un atacante sin autenticar inyecte scripts web o HTML arbitrarios en el contexto del navegador de la víctima enviando una URL maliciosamente manipulada a la víctima."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiOS","versions":[{"version":"5.6.0","status":"affected"},{"version":"5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0","status":"affected"},{"version":"5.2.11, 5.2.10, 5.2.9, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:28.749939Z","id":"CVE-2017-7739","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E627C59-7C16-44F0-800D-A2E8A766B26D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"233236FA-BB13-4261-BE2E-3E617406DC53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27844CC9-498B-4A65-91AC-AC130222EE5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"27B4C672-7ED5-4113-87AE-5774D1263C0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2CBEA3AA-AE46-4A55-91EE-9ADC187BF614"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"05CB7A90-91BC-49AF-9B5C-EBD212484C64"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"864D3221-177B-43CE-BD7D-CB14A110268E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"31C186D6-6AC5-49EB-A701-C91358B4A25F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAC9F6C4-F887-4F25-87BD-383F6CF39806"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"F8558962-7A19-4F4A-BED0-9CB5D4CFC422"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"EC63D521-EC88-4B13-BC73-3284F3FCF3A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"DB756AF8-F9D2-472E-867B-C04D11F62FA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1668AE14-D9A4-4B7D-BC3F-75885792875A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"377A2F0B-2A58-4C2C-B546-3178B353484B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"20EBDFD4-45A0-47CC-817E-48E84F945402"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8C9CDB2B-E454-4B91-9A47-615F31F1A3D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101679","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039741","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-168","source":"psirt@fortinet.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7736","sourceIdentifier":"psirt@fortinet.com","published":"2017-11-22T17:29:00.563","lastModified":"2026-06-17T01:25:04.293","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Scripting (XSS) persistente en la página de visualización de certificados de la interfaz web de usuario en Fortinet FortiWeb, en versiones 5.8.0, 5.7.1 y anteriores, permite que los atacantes inyecten scripts web o HTML arbitrarios mediante importaciones de certificados maliciosos especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 5.8.0, 5.7.1 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:27.002536Z","id":"CVE-2017-7736","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.1","matchCriteriaId":"17A29045-7C4B-4006-8855-38310732DB8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:5.8.0:*:*:*:*:*:*:*","matchCriteriaId":"0A04244D-B1B2-4A77-8A2B-B7889190336A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101916","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-131","source":"psirt@fortinet.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-14186","sourceIdentifier":"psirt@fortinet.com","published":"2017-11-29T19:29:00.273","lastModified":"2026-06-17T01:05:44.673","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows a remote user to inject arbitrary web script or HTML in the context of the victim's browser via the login redir parameter. An URL Redirection attack may also be feasible by injecting an external URL via the affected parameter."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-site Scripting (XSS) en Fortinet FortiOS versión 6.0.0 hasta 6.0.4, versión 5.6.0 hasta 5.6.7, versión 5.4 e inferiores, en el portal web SSL VPN permite a un usuario remoto inyectar scripting web o HTML arbitrarias en el contexto del navegador de la víctima por medio del parámetro redir login. Un ataque de redirección de URL también puede ser posible inyectando una URL externa mediante el parámetro afectado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiOS","versions":[{"version":"5.6.0 to 5.6.2","status":"affected"},{"version":"5.4.0 to 5.4.6","status":"affected"},{"version":"5.2.0 to 5.2.12","status":"affected"},{"version":"5.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:25.630426Z","id":"CVE-2017-14186","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"349C6B08-DCD2-4118-AEC0-3EAA159135BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartExcluding":"5.2.0","versionEndIncluding":"5.2.12","matchCriteriaId":"4BA0FBCD-AA4D-4AB1-9911-EC978FDCFC16"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.6","matchCriteriaId":"85E4F0E9-9CB3-46D6-854C-B5E374900B1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.2","matchCriteriaId":"C44E69B8-A1E8-437B-ADA3-10DE256B3368"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101955","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039891","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-242","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-14189","sourceIdentifier":"psirt@fortinet.com","published":"2017-11-29T19:29:00.320","lastModified":"2026-06-17T01:05:44.907","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password."},{"lang":"es","value":"Una vulnerabilidad de control de acceso incorrecto en Fortinet FortiWebManager 5.8.0 permite que cualquiera que pueda acceder a la interfaz de usuario web de administrador pueda iniciar sesión correctamente, independientemente de la contraseña introducida."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiWebManager","versions":[{"version":"5.8.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:09.874728Z","id":"CVE-2017-14189","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-521"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb_manager:5.8.0:*:*:*:*:*:*:*","matchCriteriaId":"7EEA6CF5-2CF1-4127-89EB-2F60CC47DDAB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101953","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039892","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-248","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7738","sourceIdentifier":"psirt@fortinet.com","published":"2017-12-13T22:29:00.283","lastModified":"2026-06-17T01:25:05.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command."},{"lang":"es","value":"Una vulnerabilidad de divulgación de información en Fortinet FortiOS de la versión 5.6.0 a la 5.6.2; 5.4.0 a la 5.4.5 y la versión 5.2 y anteriores permite que un usuario administrador con privilegios super_admin vea la información de sesión del portal web SSL VPN, que podría contener credenciales a través del comando CLI fnsysctl."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiOS","versions":[{"version":"5.6.0 to 5.6.2","status":"affected"},{"version":"5.4.0 to 5.4.5","status":"affected"},{"version":"5.2 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:04:06.880918Z","id":"CVE-2017-7738","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"2BAFDAFC-2B2B-4681-A709-CD703FFCFD70"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.5","matchCriteriaId":"AA53FD84-6F7B-462B-AFBF-D0F9D0E04639"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.2","matchCriteriaId":"ED9B0663-F69B-4F14-90B7-DF906CD0130A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/102151","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-172","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/102151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-7344","sourceIdentifier":"psirt@fortinet.com","published":"2017-12-14T18:29:00.210","lastModified":"2026-06-17T01:24:10.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows \"security alert\" dialog thereby popping up when the \"VPN before logon\" feature is enabled and an untrusted certificate chain."},{"lang":"es","value":"Una escalada de privilegios en Fortinet FortiClient Windows en versiones 5.4.3 y anteriores, así como la versión 5.6.0, permite que un atacante consiga privilegios explotando el diálogo de Windows \"security alert\" que aparece cuando la característica \"VPN before logon\" está habilitada y se conecta un certificado no fiable."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiClientWindows","versions":[{"version":"5.6.0, 5.4.3, 5.4.2, 5.4.1, 5.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","baseScore":7.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:04:05.200314Z","id":"CVE-2017-7344","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndIncluding":"5.4.3","matchCriteriaId":"3FA54405-BA2E-4B8D-A333-1CD47CCE784A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:5.6.0:*:*:*:*:windows:*:*","matchCriteriaId":"4A0005D2-3558-414D-97AC-ACAD11C0FD10"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/102176","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-070","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/","source":"psirt@fortinet.com","tags":["Exploit","Mitigation","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/102176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mitigation","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-14184","sourceIdentifier":"psirt@fortinet.com","published":"2017-12-15T21:29:00.243","lastModified":"2026-06-17T01:05:44.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2334 and below versions allows regular users to see each other's VPN authentication credentials due to improperly secured storage locations."},{"lang":"es","value":"Una vulnerabilidad de divulgación de información en Fortinet FortiClient for Windows 5.6.0 y anteriores, FortiClient for Mac OSX 5.6.0 y anteriores y FortiClient SSLVPN Client for Linux 4.4.2334 y anteriores permite que usuarios regulares vean las credenciales de autenticación de VPN de otros usuarios. Esto se debe a las ubicaciones de almacenamiento indebidamente aseguradas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiClient for Windows","versions":[{"version":"5.6.0 and below","status":"affected"}]},{"vendor":"Fortinet, Inc.","product":"FortiClient for Mac OSX","versions":[{"version":"5.6.0 and below","status":"affected"}]},{"vendor":"Fortinet, Inc.","product":"FortiClient SSLVPN Client for Linux","versions":[{"version":"4.4.2334 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:04:03.769096Z","id":"CVE-2017-14184","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndExcluding":"5.6.0","matchCriteriaId":"FF770657-32BD-4CE2-BB3E-50A9AD8BFD18"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionEndExcluding":"5.6.0","matchCriteriaId":"AF2D5D8E-4658-486E-836F-2F7B98109F82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_sslvpn_client:*:*:*:*:*:linux:*:*","versionEndExcluding":"4.4.2334","matchCriteriaId":"4D0218F0-8C34-4F8A-B435-74B1F2C484AF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/102123","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-214","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/102123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-14190","sourceIdentifier":"psirt@fortinet.com","published":"2018-01-29T16:29:00.230","lastModified":"2026-06-17T01:05:45.017","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-site Scripting vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.7, 5.2 and earlier, allows attacker to inject arbitrary web script or HTML via maliciously crafted \"Host\" header in user HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Scripting (XSS) en Fortinet FortiOS 5.6.0 a 5.6.2; 5.4.0 a 5.4.7 y 5.2 y anteriores permite que un atacante inyecte scripts web o HTML arbitrarios mediante una cabecera \"Host\" maliciosamente manipulada en las peticiones HTTP de usuario."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiOS","versions":[{"version":"5.6.0 to 5.6.2","status":"affected"},{"version":"5.4.0 to 5.4.7","status":"affected"},{"version":"5.2 and all earlier versions.","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:23.608294Z","id":"CVE-2017-14190","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.0","matchCriteriaId":"3085A41F-2305-46D3-AE10-6D256B6E1F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.7","matchCriteriaId":"7F0AC998-B751-4E73-9C37-D2721F1795CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.2","matchCriteriaId":"C44E69B8-A1E8-437B-ADA3-10DE256B3368"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/102779","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040284","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-262","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/102779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-14191","sourceIdentifier":"psirt@fortinet.com","published":"2018-03-20T13:29:00.247","lastModified":"2026-06-17T01:05:45.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0 under \"Signed Security Mode\", allows attacker to bypass the signed user cookie protection by removing the FortiWeb own protection session cookie."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado en Fortinet FortiWeb versión 5.6.0 hasta 6.1.0 en \"Signed Security Mode\", permite al atacante omitir la protección de la cookie de usuario firmada eliminando la propia cookie de sesión de protección de FortiWeb."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiWeb","versions":[{"version":"5.6.0 and above","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:22.017935Z","id":"CVE-2017-14191","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.1.0","matchCriteriaId":"8852A454-A129-447C-9B2E-6E16184EFA22"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/103430","source":"psirt@fortinet.com","tags":["Mitigation","Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-279","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/103430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-17543","sourceIdentifier":"psirt@fortinet.com","published":"2018-04-26T20:29:00.243","lastModified":"2026-06-17T01:11:14.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak encryption algorithms."},{"lang":"es","value":"Las credenciales de autenticación de VPN de los usuarios se cifran de manera no segura en Fortinet FortiClient para Windows en versiones 5.6.0 y anteriores, FortiClient para Mac OSX en versiones 5.6.0 y anteriores y FortiClient SSLVPN Client para Linux en versiones 4.4.2335 y anteriores, debido a la uso de una clave de cifrado estático y algoritmos de cifrado débiles."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiClient for Windows","versions":[{"version":"5.6.0 and below versions","status":"affected"}]},{"vendor":"Fortinet, Inc.","product":"FortiClient for Mac OSX","versions":[{"version":"5.6.0 and below versions","status":"affected"}]},{"vendor":"Fortinet, Inc.","product":"FortiClient SSLVPN Client for Linux","versions":[{"version":"4.4.2335 and below versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:10:01.644124Z","id":"CVE-2017-17543","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndIncluding":"5.6.0","matchCriteriaId":"05C9130B-9139-407F-B6F9-9B64A8B830D6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionEndIncluding":"5.6.0","matchCriteriaId":"6DA8975F-A2E7-47D2-83BA-6990673124BC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_sslvpn_client:*:*:*:*:*:linux:*:*","versionEndIncluding":"4.4.2335","matchCriteriaId":"B0DB26D0-44AA-4958-A926-B6BDCAA9402A"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-17-214","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/advisory/FG-IR-17-214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2017-17539","sourceIdentifier":"psirt@fortinet.com","published":"2018-05-08T04:29:00.207","lastModified":"2026-06-17T01:11:13.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to gain unauthorized read/write access via a remote shell."},{"lang":"es","value":"La presencia de una cuenta embebida en Fortinet FortiWLC en versiones 7.0.11 y anteriores permite que atacantes obtengan acceso de lectura/escritura mediante un shell remoto."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiWLC","versions":[{"version":"7.0.11 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:08.330380Z","id":"CVE-2017-17539","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.0.11","matchCriteriaId":"7337AA30-3FBE-4AC4-ABED-5B6976573E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndIncluding":"8.3.3","matchCriteriaId":"709F03A8-5B27-472A-AAAF-6D0B2BAD3099"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/104119","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-274","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-17540","sourceIdentifier":"psirt@fortinet.com","published":"2018-05-08T04:29:00.380","lastModified":"2026-06-17T01:11:13.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access via a remote shell."},{"lang":"es","value":"La presencia de una cuenta embebida en Fortinet FortiWLC 8.3.3 permite que atacantes obtengan acceso de lectura/escritura mediante un shell remoto."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiWLC","versions":[{"version":"8.3.3","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:06.760147Z","id":"CVE-2017-17540","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.0.11","matchCriteriaId":"7337AA30-3FBE-4AC4-ABED-5B6976573E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndIncluding":"8.3.3","matchCriteriaId":"709F03A8-5B27-472A-AAAF-6D0B2BAD3099"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/104119","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-274","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-14187","sourceIdentifier":"psirt@fortinet.com","published":"2018-05-24T20:29:00.210","lastModified":"2026-06-17T01:05:44.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary program to a command that is allowed to be run by the fnsysctl CLI command."},{"lang":"es","value":"Una vulnerabilidad de escalado de privilegios local y ejecución de código local en Fortinet FortiOS, de la versión 5.6.0 hasta la 5.6.2, de la versión 5.4.0 hasta la 5.4.8 y en versiones 5.2 y anteriores, permite que un atacante ejecute un programa binario no autorizado en una memoria USB conectada en un FortiGate enlazando dicho programa binario con un comando que puede ser ejecutado por el comando fnsysctl de la interfaz de línea de comandos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiOS","versions":[{"version":"5.6.0 to 5.6.2","status":"affected"},{"version":"5.4.0 to 5.4.8","status":"affected"},{"version":"5.2 and below versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.3,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:04:02.367280Z","id":"CVE-2017-14187","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.0","matchCriteriaId":"3085A41F-2305-46D3-AE10-6D256B6E1F95"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.8","matchCriteriaId":"DCDB1D22-D470-4AA4-AFB9-1A3D28E69C2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.2","matchCriteriaId":"C44E69B8-A1E8-437B-ADA3-10DE256B3368"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/104312","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040983","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-245","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-14185","sourceIdentifier":"psirt@fortinet.com","published":"2018-05-25T16:29:00.230","lastModified":"2026-06-17T01:05:44.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal."},{"lang":"es","value":"Una vulnerabilidad de fuga de información en Fortinet FortiOS, de la versión 5.6.0 a la 5.6.2, de la 5.4.0 a la 5.4.8 y todas las versiones de 5.2, permite que usuarios del portal web SSL VPN accedan a información de configuración interna de FortiOS (por ejemplo, a las direcciones) mediante URL especialmente manipuladas dentro del portal web SSL-VPN."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiOS","versions":[{"version":"5.6.0 to 5.6.2","status":"affected"},{"version":"5.4.0 to 5.4.8","status":"affected"},{"version":"5.2 all versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:10:00.333868Z","id":"CVE-2017-14185","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.13","matchCriteriaId":"DAE351C0-A75B-47C6-9B53-59CF67C6A552"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.8","matchCriteriaId":"DCDB1D22-D470-4AA4-AFB9-1A3D28E69C2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.2","matchCriteriaId":"C44E69B8-A1E8-437B-ADA3-10DE256B3368"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/104288","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-231","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-9186","sourceIdentifier":"psirt@fortinet.com","published":"2018-05-31T22:29:00.253","lastModified":"2026-06-17T02:06:12.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 \"CSRF validation failure\" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header."},{"lang":"es","value":"Una vulnerabilidad Cross-Site Scripting (XSS) en Fortinet FortiAuthenticator, desde la versión 4.0.0 hasta antes de la 5.3.0, en la página \"CSRF validation failure\", permite que un atacante ejecute código script no autorizado mediante la inyección de scripts maliciosos en la cabecera referer HTTP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiAuthenticator","versions":[{"version":"below 5.3.0 versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:20.619763Z","id":"CVE-2018-9186","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"5.3.0","matchCriteriaId":"189DF9FD-8CC2-4362-873D-0A858DF08A33"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/104371","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-059","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-1354","sourceIdentifier":"psirt@fortinet.com","published":"2018-06-27T20:29:03.620","lastModified":"2026-06-17T01:51:05.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content."},{"lang":"es","value":"Una vulnerabilidad de control de acceso incorrecto en Fortinet FortiManager en versiones 6.0.0 y 5.6.5 y anteriores y FortiAnalyzer en versiones 6.0.0 y 5.6.5 y anteriores permite que un usuario regular edite la imagen de avatar de otros usuarios con contenido arbitrario."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiManager, FortiAnalyzer","versions":[{"version":"FortiManager 6.0.0, 5.6.5 and below versions","status":"affected"},{"version":"FortiAnalyzer 6.0.0, 5.6.5 and below versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:18.894628Z","id":"CVE-2018-1354","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.0","matchCriteriaId":"43ECD4D9-51B0-4737-A04E-FDC1B23BDD04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.0","matchCriteriaId":"3E25A826-D987-409E-95B4-5CACC064DF80"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/104537","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041182","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041183","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-014","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-1355","sourceIdentifier":"psirt@fortinet.com","published":"2018-06-27T20:29:04.933","lastModified":"2026-06-17T01:51:05.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature.  An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs."},{"lang":"es","value":"Una vulnerabilidad de redirección abierta en Fortinet FortiManager en versiones 6.0.0, 5.6.5 y anteriores y en FortiAnalyzer en versiones 6.0.0, 5.6.5 y anteriores permite que un atacante inyecte código de script durante la conversión de una tabla HTML a documento HTML en la característica FortiView. Un atacante podría ser capaz de emplear ingeniería social sobre un usuario autenticado para que genere un archivo PDF que contiene URL maliciosas inyectadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiManager, FortiAnalyzer","versions":[{"version":"FortiManager 6.0.0, 5.6.5 and below versions","status":"affected"},{"version":"FortiAnalyzer 6.0.0, 5.6.5 and below versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:17.334147Z","id":"CVE-2018-1355","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.5","matchCriteriaId":"6A0081B7-6068-4F35-92C0-B51196BC2F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C588A627-EBF3-400F-88D6-62D08F9BEB3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.5","matchCriteriaId":"587A6B16-B611-4A84-A890-03536A2C3E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B6662CFD-6DAD-4187-AE80-0B7EE99CEB96"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/104546","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041184","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041185","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-022","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-1351","sourceIdentifier":"psirt@fortinet.com","published":"2018-06-28T15:29:00.307","lastModified":"2026-06-17T01:51:04.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to execute HTML/javascript code via managed remote devices CLI commands by viewing the remote device CLI config installation log."},{"lang":"es","value":"Una vulnerabilidad Cross-Site Scripting (XSS) en Fortinet FortiManager en versiones 6.0.0, 5.6.6 y anteriores permite que un atacante ejecute código HTML/javascript mediante comandos de interfaz de línea de comandos CLI de los dispositivos remotos administrados al visualizar el log de instalación de la configuración de CLI del dispositivo remoto."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiManager","versions":[{"version":"FortiManager 6.0.0 and below versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:15.978304Z","id":"CVE-2018-1351","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.0","matchCriteriaId":"3E25A826-D987-409E-95B4-5CACC064DF80"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/104533","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041181","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-006","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-9185","sourceIdentifier":"psirt@fortinet.com","published":"2018-07-05T13:29:00.740","lastModified":"2026-06-17T02:06:12.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login credentials in a Javascript file sent to client-side when pages bookmarked in web portal use the Single Sign-On feature."},{"lang":"es","value":"Una vulnerabilidad de divulgación de información en Fortinet FortiOS en versiones 6.0.0 y anteriores revela las credenciales de inicio de sesión del usuario al portal web en un archivo JavaScript enviado al lado del cliente cuando las páginas guardadas en el portal web emplean la funcionalidad Single Sign-On."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.0.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:04:00.856306Z","id":"CVE-2018-9185","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.0","matchCriteriaId":"0B87EAEF-7D53-45A3-A7C0-DC7E2B7F754D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/104535","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041186","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-027","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-17541","sourceIdentifier":"psirt@fortinet.com","published":"2018-07-16T20:29:00.270","lastModified":"2026-06-17T01:11:14.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Scripting (XSS) en Fortinet FortiManager 6.0.0, 5.6.4 y anteriores y FortiAnalyzer 6.0.0, 5.6.4 y anteriores permite inyectar código JavaScript y etiquetas HTML mediante el valor CN de los certificados CA y CRL mediante la característica de importación de certificados CA y CRL."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager, FortiAnalyzer","versions":[{"version":"FortiManager 6.0.0, 5.6.4 and below versions; FortiAnalyzer 6.0.0, 5.6.4 and below versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:14.644167Z","id":"CVE-2017-17541","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.4","matchCriteriaId":"14395CC2-7264-4F1C-BB71-BA70BB97980F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortianalyzer_firmware:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FC9E13C1-4CEC-45FD-B7BE-207537565BBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.4","matchCriteriaId":"DEBC8DBF-8BC5-4DD8-A724-985DE305EA04"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortimanager_firmware:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"86E0D6CE-4731-4A1E-BFEE-E57EEF25F63B"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1041246","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041247","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-305","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1041246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-1353","sourceIdentifier":"psirt@fortinet.com","published":"2018-09-05T13:29:00.230","lastModified":"2026-06-17T01:51:04.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned adom."},{"lang":"es","value":"Una vulnerabilidad de divulgación de información en Fortinet FortiManager en versiones 6.0.1 y anteriores permite que un usuario estándar con un assignment adom lea las opciones de interfaz de vdoms que no están relacionadas con el adom asignado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiManager","versions":[{"version":"6.0.1 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:13.163960Z","id":"CVE-2018-1353","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"BE3EC8E5-4BB4-4F85-B255-9EADAA622706"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-016","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-9192","sourceIdentifier":"psirt@fortinet.com","published":"2018-09-05T13:29:00.493","lastModified":"2026-06-17T02:06:13.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key. Fortinet FortiOS 5.4.6 to 5.4.9, 6.0.0 and 6.0.1 are vulnerable by such attack under SSL Deep Inspection feature when CPx being used."},{"lang":"es","value":"Podría ser posible recuperar en texto plano mensajes cifrados o realizar un ataque Man-in-the-Middle (MitM) en el cifrado RSA PKCS #1 v1.5 sin conocer la clave privada del servidor. Fortinet FortiOS, de la versión 5.4.6 a la 5.4.9 y las versiones 6.0.0 y 6.0.1, son vulnerables por medio de dichos ataques bajo la funcionalidad SSL Deep Inspection cuando se emplea CPx."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiOS","versions":[{"version":"6.0.1, 6.0.0","status":"affected"},{"version":"5.4.9, 5.4.8, 5.4.7, 5.4.6","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:11.700164Z","id":"CVE-2018-9192","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.6","versionEndIncluding":"5.4.9","matchCriteriaId":"9690D76F-27B1-439A-8BD3-4B6FAC24C029"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3907C1C9-EAEB-4287-82DA-06F242DEA639"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"52A0DB21-C876-4DD3-95ED-8BA0483F0BD4"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-17-302","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://robotattack.org/","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/144389","source":"psirt@fortinet.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://robotattack.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/144389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2018-9194","sourceIdentifier":"psirt@fortinet.com","published":"2018-09-05T13:29:00.637","lastModified":"2026-06-17T02:06:13.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be possible without knowledge of the server's private key. Fortinet FortiOS 5.4.6 to 5.4.9, 6.0.0 and 6.0.1 are vulnerable by such attack under VIP SSL feature when CPx being used."},{"lang":"es","value":"Podría ser posible recuperar en texto plano mensajes cifrados o realizar un ataque Man-in-the-Middle (MitM) en el cifrado RSA PKCS #1 v1.5 sin conocer la clave privada del servidor. Fortinet FortiOS, de la versión 5.4.6 a la 5.4.9 y las versiones 6.0.0 y 6.0.1, son vulnerables por medio de dichos ataques bajo la funcionalidad VIP SSL cuando se emplea CPx."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"FortiOS","versions":[{"version":"6.0.1, 6.0.0","status":"affected"},{"version":"5.4.9, 5.4.8, 5.4.7, 5.4.6","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:10.318413Z","id":"CVE-2018-9194","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.6","versionEndIncluding":"5.4.9","matchCriteriaId":"9690D76F-27B1-439A-8BD3-4B6FAC24C029"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3907C1C9-EAEB-4287-82DA-06F242DEA639"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"52A0DB21-C876-4DD3-95ED-8BA0483F0BD4"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-17-302","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://robotattack.org/","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/144389","source":"psirt@fortinet.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://robotattack.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/144389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2018-13376","sourceIdentifier":"psirt@fortinet.com","published":"2018-11-27T15:29:00.227","lastModified":"2026-06-17T01:39:17.883","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response."},{"lang":"es","value":"Existe una fuga del búfer de memoria sin inicializar en Fortinet FortiOS, de la versión 5.6.1 a la 5.6.3, de la versión 5.4.6 a la 5.4.7 y en todas las versiones desde la 5.2 bajo las páginas web de renuncia de respuesta del proxy web, lo que podría provocar que los datos sensibles se muestren en la respuesta HTTP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:58.734329Z","id":"CVE-2018-13376","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.12","matchCriteriaId":"E87EA862-D58B-4C52-BFF0-54B8D01BC569"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.6","versionEndIncluding":"5.4.7","matchCriteriaId":"4200DCE0-8A28-4E77-A687-E89C582B7D30"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.1","versionEndIncluding":"5.6.3","matchCriteriaId":"15CA187D-7F6A-454C-9E95-EE61D578EC10"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/106036","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-325","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/106036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2018-13374","sourceIdentifier":"psirt@fortinet.com","published":"2019-01-22T14:29:00.220","lastModified":"2026-10-01T19:17:13.713","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one."},{"lang":"es","value":"Un control de acceso inadecuado en Fortinet FortiOS 6.0.2, 5.6.7 y anteriores, FortiADC 6.1.0, 6.0.0 a 6.0.1, 5.4.0 a 5.4.4 permite a un atacante obtener las credenciales de inicio de sesión del servidor LDAP configurado en FortiGate a través de una solicitud de prueba de conectividad del servidor LDAP a un servidor LDAP falso en lugar del configurado"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS, fortiADC","versions":[{"version":"FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-13T03:55:44.104742Z","id":"CVE-2018-13374","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-09-08","cisaActionDue":"2022-09-29","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet FortiOS and FortiADC Improper Access Control Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndExcluding":"5.4.5","matchCriteriaId":"7FE3819E-9A44-450F-A461-C8C98C4EA37C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.2","matchCriteriaId":"8C5CDC2B-23F8-4023-AC68-155C274F900E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"028E15CD-B5F9-4376-9758-78D131103BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.3","matchCriteriaId":"93254072-D30A-4BF8-9AB5-40DF2C2D5507"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-157","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-13374","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2018-1352","sourceIdentifier":"psirt@fortinet.com","published":"2019-02-08T18:29:00.237","lastModified":"2026-06-17T01:51:04.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable."},{"lang":"es","value":"Una vulnerabilidad de cadena de formato en Fortinet FortiOS 5.6.0 permite que un atacante ejecute código o comandos no autorizados mediante la variable SSH de nombre de usuario."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:05.458642Z","id":"CVE-2018-1352","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-018","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-9190","sourceIdentifier":"psirt@fortinet.com","published":"2019-02-08T19:29:00.250","lastModified":"2026-06-17T02:06:12.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver."},{"lang":"es","value":"Una vulnerabilidad de desreferencia de puntero NULL en Fortinet FortiClientWindows, en versiones 6.0.2 y anteriores, permite que los atacantes provoquen una denegación de servicio (DoS) mediante el controlador del minipuerto NDIS."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiClientWindows","versions":[{"version":"FortiClientWindows 6.0.2 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:05.951648Z","id":"CVE-2018-9190","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndIncluding":"6.0.2","matchCriteriaId":"1A0B254F-FD7B-442C-A710-0C681B500F30"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-092","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-7340","sourceIdentifier":"psirt@fortinet.com","published":"2019-03-25T21:29:03.787","lastModified":"2026-06-17T01:24:09.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality."},{"lang":"es","value":"Una vulnerabilidad Cross-Site Scripting en Fortinet FortiPortal en su versión 4.0.0 y anteriores permite que atacantes remotos ejecuten código o comandos sin autorización mediante el parámetro applicationSearch en la funcionalidad FortiView."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"4.0.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:03.610006Z","id":"CVE-2017-7340","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"F12C46D5-F018-4114-86A5-AF643CFA348C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-7342","sourceIdentifier":"psirt@fortinet.com","published":"2019-03-25T22:29:00.263","lastModified":"2026-06-17T01:24:10.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button"},{"lang":"es","value":"Una vulnerabilidad de debilidad del proceso de recuperación de contraseña en Fortinet FortiPortal en su versión 4.0.0 y anteriores permite que atacantes remotos ejecuten código o comandos sin autorización mediante un botón ‘‘Close’’ oculto."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal versions 4.0.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:04.164564Z","id":"CVE-2017-7342","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0","matchCriteriaId":"F12C46D5-F018-4114-86A5-AF643CFA348C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-17544","sourceIdentifier":"psirt@fortinet.com","published":"2019-04-09T16:29:00.367","lastModified":"2026-06-17T01:11:14.343","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A privilege escalation vulnerability in Fortinet FortiOS 6.0.0 to 6.0.6, 5.6.0 to 5.6.10, 5.4 and below allows admin users to elevate their profile to super_admin via restoring modified configurations."},{"lang":"es","value":"Una vulnerabilidad de escalada de privilegios en Fortinet FortiOS en las versiones 6.0.0 a 6.0.6, 5.6.0 a 5.6.10, 5.4 e inferiores permite a los usuarios administradores elevar su perfil a super_admin mediante la restauración de configuraciones modificadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","versions":[{"version":"< 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:59.615875Z","id":"CVE-2017-17544","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.0","matchCriteriaId":"42CF4335-25C7-473E-83E8-37C1B9575D45"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.10","matchCriteriaId":"9BC4C822-47EB-4EA0-834D-7A63D9F0E46D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"8FA4CED9-EAB9-4FE4-B058-CC4D3E03C520"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/107839","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-053","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/107839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-13366","sourceIdentifier":"psirt@fortinet.com","published":"2019-04-09T17:29:00.223","lastModified":"2026-06-17T01:39:17.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability in Fortinet FortiOS 6.0.1, 5.6.7 and below allows attacker to reveals serial number of FortiGate via hostname field defined in connection control setup packets of PPTP protocol."},{"lang":"es","value":"Una vulnerabilidad de divulgación de información en Fortinet FortiOS versiones 6.0.1, 5.6.7 y anteriores, le permite al atacante revelar el número de serie de FortiGate por medio del campo hostname definido en los paquetes de configuración de control de conexión del protocolo PPTP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"6.0.1","status":"affected"},{"version":"5.6.7 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:57.602345Z","id":"CVE-2018-13366","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.7","matchCriteriaId":"7D036525-5B1B-4E56-AD31-E41AD9AE766E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3907C1C9-EAEB-4287-82DA-06F242DEA639"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"52A0DB21-C876-4DD3-95ED-8BA0483F0BD4"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-101","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-1356","sourceIdentifier":"psirt@fortinet.com","published":"2019-04-09T21:29:00.223","lastModified":"2026-06-17T01:51:05.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component."},{"lang":"es","value":"Una vulnerabilidad Cross-Site-Scripting (XSS) reflejado en Fortinet FortiSandbox, antes de la versión 3.0, puede permitir que un atacante ejecute código o comandos no autorizados a través del parámetro back_url en el componente de análisis de archivos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","versions":[{"version":"2.5.2","status":"affected"},{"version":"2.5.1","status":"affected"},{"version":"2.5.0","status":"affected"},{"version":"2.4.1","status":"affected"},{"version":"2.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:00:01.043989Z","id":"CVE-2018-1356","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.0","matchCriteriaId":"59BAD43F-20A8-4A53-9DC7-ED5952A721ED"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/107838","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-024","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/107838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-5585","sourceIdentifier":"psirt@fortinet.com","published":"2019-04-09T21:29:03.707","lastModified":"2026-06-17T02:37:53.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in FortiClientMac before 6.0.5 may allow an attacker to affect the application's performance via modifying the contents of a file used by several FortiClientMac processes."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiada en FortiClientMac anterior a la versión 6.0.5 puede permitir que un atacante afecte el rendimiento de la aplicación por medio de la modificación del contenido de un archivo utilizado por varios procesos de FortiClientMac."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","versions":[{"version":"6.0.4","status":"affected"},{"version":"6.0.3","status":"affected"},{"version":"6.0.2","status":"affected"},{"version":"6.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:59.058259Z","id":"CVE-2019-5585","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:forticlient:forticlient:6.0.1:*:*:*:*:mac_os_x:*:*","matchCriteriaId":"93DDC279-C998-4716-B0B8-A141C2B4178A"},{"vulnerable":true,"criteria":"cpe:2.3:a:forticlient:forticlient:6.0.2:*:*:*:*:mac_os_x:*:*","matchCriteriaId":"4E703FAC-E315-46A7-8E00-12B583A3FC56"},{"vulnerable":true,"criteria":"cpe:2.3:a:forticlient:forticlient:6.0.3:*:*:*:*:mac_os_x:*:*","matchCriteriaId":"79584239-EA8F-4A17-839B-D0382BA45024"},{"vulnerable":true,"criteria":"cpe:2.3:a:forticlient:forticlient:6.0.4:*:*:*:*:mac_os_x:*:*","matchCriteriaId":"821D145D-55DC-4E97-A76A-5BCEE32C5E77"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/107693","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-003","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/107693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-13378","sourceIdentifier":"psirt@fortinet.com","published":"2019-04-17T15:29:00.437","lastModified":"2026-06-17T01:39:18.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability in Fortinet FortiSIEM 5.2.0 and below versions exposes the LDAP server plaintext password via the HTML source code."},{"lang":"es","value":"Una vulnerabilidad de divulgación de información en Fortinet FortiSIEM versión 5.2.0 y versiones anteriores, revela la contraseña de texto plano del servidor LDAP por medio del código fuente HTML."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiSIEM","versions":[{"version":"FortiSIEM 5.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:58.376877Z","id":"CVE-2018-13378","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.0","matchCriteriaId":"C47F7C1E-EA58-41E9-87F9-7EE3F12E8B13"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-382","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2018-1360","sourceIdentifier":"psirt@fortinet.com","published":"2019-04-25T18:29:00.333","lastModified":"2026-06-17T01:51:05.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses."},{"lang":"es","value":"Existe una vulnerabilidad de transmisión en texto claro de información sensible en Fortinet FortiManager para las versiones desde la 5.2.0 hasta la 5.2.7, 5.4.0 y 5.4.1 un atacante no autenticado puede realizar un ataque man in the middle, y recuperar la contraseña de administrador interceptando las respuestas de REST API JSON."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiManager","versions":[{"version":"5.2.0 to 5.2.7","status":"affected"},{"version":"5.4.0","status":"affected"},{"version":"5.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:57.208708Z","id":"CVE-2018-1360","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.7","matchCriteriaId":"F07068D8-E21A-4C42-9111-035612F09F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"849E2A27-7984-426E-A56A-E4D6338E5EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"50CB5ABE-B76C-4E29-915C-A9BCC50B7A13"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/108079","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-051","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/108079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-13375","sourceIdentifier":"psirt@fortinet.com","published":"2019-05-28T19:29:00.597","lastModified":"2026-06-17T01:39:17.757","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in FortiAnalyzer and FortiManager (with FortiAnalyzer feature enabled)."},{"lang":"es","value":"Una neutralización inapropiada de las etiquetas HTML relacionadas con scripting en Fortinet FortiAnalyzer versión 5.6.0 y anteriores y FortiManager versión 5.6.0 y anteriores, permite a un atacante enviar una petición DHCP que contenga scripts maliciosos en el parámetro HOSTNAME. El código script malicioso es ejecutado durante la visualización de los registros en FortiAnalyzer y FortiManager (con la función FortiAnalyzer habilitada)."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","versions":[{"version":"FortiAnalyzer 5.6.0 and below","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","versions":[{"version":"FortiManager 5.6.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:57.608819Z","id":"CVE-2018-13375","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.0","matchCriteriaId":"3ADD2237-8F19-4579-9A09-830F043A3A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.0","matchCriteriaId":"DA5B6363-5F6A-495A-85A0-4463C48F5513"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-121","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-5589","sourceIdentifier":"psirt@fortinet.com","published":"2019-05-28T22:29:00.670","lastModified":"2026-10-13T18:17:09.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A untrusted search path vulnerability in Fortinet  may allow attacker to execute unauthorized code or commands via network exploitable"},{"lang":"es","value":"Una vulnerabilidad de ruta de búsqueda insegura en el instalador en línea de FortiClient (versión de Windows anterior a 6.0.6) puede permitir que un atacante remoto no identificado con control sobre el directorio en el que FortiClientOnlineInstaller.exe reside, ejecute código arbitrario en el sistema mediante la carga de archivos .dll maliciosos en este directorio."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:5.6.*:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.5","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.6","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.6","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.11","versionType":"semver","status":"affected"},{"version":"4.3.0","lessThanOrEqual":"4.3.5","versionType":"semver","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.7","versionType":"semver","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.3","versionType":"semver","status":"affected"},{"version":"4.0.1","lessThanOrEqual":"4.0.4","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThan":"5.6.*","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:55.925107Z","id":"CVE-2019-5589","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndExcluding":"6.0.6","matchCriteriaId":"92AD53B0-B537-4A53-B8FC-2D7CC7EA8D9A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-19-060","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/advisory/FG-IR-19-060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-13383","sourceIdentifier":"psirt@fortinet.com","published":"2019-05-29T18:29:00.693","lastModified":"2026-06-17T01:39:18.710","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages."},{"lang":"es","value":"Un desbordamiento del búfer de la pila en Fortinet FortiOS versión 6.0.0 hasta 6.0.4, versión 5.6.0 hasta 5.6.10, versión 5.4.0 hasta 5.4.12, versión 5.2.14 y anteriores y FortiProxy versión 2.0.0, versión 1.2.8 y anteriores en el portal web de SSL VPN puede provocar la finalización del servicio web de SSL VPN para los usuarios registrados debido a un fallo en el manejo de los datos href de javascript al proxiar las páginas web"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS and FortiProxy","versions":[{"version":"FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier, FortiProxy 2.0.0, 1.2.8 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:33:02.861324Z","id":"CVE-2018-13383","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-01-10","cisaActionDue":"2022-07-10","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet FortiOS and FortiProxy Out-of-bounds Write","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.9","matchCriteriaId":"4B47708E-8A92-4767-8685-49C3143D0920"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndExcluding":"5.2.15","matchCriteriaId":"5CC2097E-BA3D-4596-B4E4-5FB0DDCAE2FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndExcluding":"5.4.13","matchCriteriaId":"B07B6E15-30AE-44E6-8009-A30FD3E5CCD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"5.6.11","matchCriteriaId":"9093BE81-687C-4CCB-834A-BE49CEE367C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.5","matchCriteriaId":"D37F1481-E7A7-4428-89C9-5DF9D206D056"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-388","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-229","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-13383","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2018-13365","sourceIdentifier":"psirt@fortinet.com","published":"2019-05-29T21:29:00.840","lastModified":"2026-06-17T01:39:16.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page."},{"lang":"es","value":"Una vulnerabilidad de exposición a la información en Fortinet FortiOS versiones 6.0.1, 5.6.5 y posteriores, permite a los atacantes conocer la IP privada, además de el nombre de host de FortiGate por medio de la página bloqueo de control de aplicaciones (Application Control Block) ."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"6.0.1","status":"affected"},{"version":"5.6.5 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:56.158960Z","id":"CVE-2018-13365","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.5","matchCriteriaId":"4836168A-6CD1-40DF-83E7-557E0CD6D3C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.6","versionEndIncluding":"6.0.1","matchCriteriaId":"B2A02AE4-E5E0-4C92-AEFB-8149C7B3AA6C"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-085","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-13368","sourceIdentifier":"psirt@fortinet.com","published":"2019-05-30T17:29:00.217","lastModified":"2026-06-17T01:39:17.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attacker to execute unauthorized code or commands via the command injection."},{"lang":"es","value":"una escaldada local de privilegios Fortinet FortiClient para Windows 6.0.4 y versiones anteriores permite al atacante ejecutar código o comandos no autorizados a través de la inyección de comandos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClient for Windows","versions":[{"version":"6.0.4 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:53.448642Z","id":"CVE-2018-13368","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndIncluding":"6.0.4","matchCriteriaId":"C30C0E35-C7D4-40F5-AA98-1283DF9635F3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-108","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-9191","sourceIdentifier":"psirt@fortinet.com","published":"2019-05-30T17:29:00.307","lastModified":"2026-06-17T02:06:13.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates."},{"lang":"es","value":"Un escalada local de privilegios en Fortinet FortiClient para Windows 6.0.4 y versiones anteriores permite a los atacantes ejecutar códigos o comandos no autorizados a través de la canalización con nombre responsable de las actualizaciones de Forticlient."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClient for Windows","versions":[{"version":"6.0.4 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:54.701165Z","id":"CVE-2018-9191","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndIncluding":"6.0.4","matchCriteriaId":"C30C0E35-C7D4-40F5-AA98-1283DF9635F3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-108","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-9193","sourceIdentifier":"psirt@fortinet.com","published":"2019-05-30T17:29:00.340","lastModified":"2026-06-17T02:06:13.253","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabilities can turn into an exploit chain, which allows a user to gain system privileges on Microsoft Windows."},{"lang":"es","value":"Ua escalado de privilegios locales en Fortinet FortiClient para Windows 6.0.4 y versiones anteriores permite al atacante ejecutar código o comandos no autorizados a través del análisis del archivo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.5","versionType":"semver","status":"affected"},{"version":"5.6.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:52.278919Z","id":"CVE-2018-9193","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndIncluding":"6.0.4","matchCriteriaId":"C30C0E35-C7D4-40F5-AA98-1283DF9635F3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-108","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-13379","sourceIdentifier":"psirt@fortinet.com","published":"2019-06-04T21:29:00.233","lastModified":"2026-06-17T01:39:18.123","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests."},{"lang":"es","value":"Una limitación inadecuada de un nombre de ruta a un directorio restringido (\"Path Traversal\") en Fortinet FortiOS versiones 6.0.0 a 6.0.4, 5.6.3 a 5.6.7 y 5.4.6 a 5.4.12 y FortiProxy versiones 2.0.0, 1. 2.0 a 1.2.8, 1.1.0 a 1.1.6, 1.0.0 a 1.0.7 bajo el portal web SSL VPN permite a un atacante no autenticado descargar archivos del sistema a través de solicitudes de recursos HTTP especialmente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS, FortiProxy","versions":[{"version":"FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12, FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:32:05.098252Z","id":"CVE-2018-13379","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2022-05-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.9","matchCriteriaId":"4B47708E-8A92-4767-8685-49C3143D0920"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.6","versionEndExcluding":"5.4.13","matchCriteriaId":"B7016D5F-23EE-4922-B6ED-312522776B25"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.3","versionEndExcluding":"5.6.8","matchCriteriaId":"44120B30-029A-4283-9441-A815A96ADD9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.5","matchCriteriaId":"D37F1481-E7A7-4428-89C9-5DF9D206D056"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-384","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-233","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-13379","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2018-13380","sourceIdentifier":"psirt@fortinet.com","published":"2019-06-04T21:29:00.267","lastModified":"2026-06-17T01:39:18.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FortiProxy 2.0.0, 1.2.8 and below under SSL VPN web portal allows attacker to execute unauthorized malicious script code via the error or message handling parameters."},{"lang":"es","value":"Una vulnerabilidad de Cross-site Scripting (XSS) en Fortinet FortiOS 6.0.0 a 6.0.4, 5.6.0 a 5.6.7, 5.4.0 a 5.4.12, 5.2 y posteriores y Fortinet FortiProxy versiones 2.0.0, 1.2.8 y versiones posteriores en el portal web SSL VPN permite al atacante ejecutar sin autorización código de script malicioso a través del error o los parámetros de manejo de mensajes"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS and FortiProxy","versions":[{"version":"FortiGate 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4.0 through 5.4.12, 5.2 and earlier and FortiProxy versions 2.0.0, 1.2.8 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:56.106542Z","id":"CVE-2018-13380","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"D695780A-26CA-4522-876E-FFC44F035F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.12","matchCriteriaId":"7F970C1D-5018-4D52-91F6-A5F2CD123935"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.7","matchCriteriaId":"8CC23731-E080-43CF-9BB8-149FC0173388"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"D8D27D2C-5211-41A7-B0F4-7721EE7884BF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.8","matchCriteriaId":"26F099AE-4482-4964-8B8A-1B412A423C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-383","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-230","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-13381","sourceIdentifier":"psirt@fortinet.com","published":"2019-06-04T21:29:00.313","lastModified":"2026-06-17T01:39:18.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier versions under SSL VPN web portal allows a non-authenticated attacker to perform a Denial-of-service attack via special craft message payloads."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en Fortinet FortiOS versión 6.0.0 hasta la 6.0.4, versión 5.6.0 hasta la5.6.7, versión 5.4 y anteriores y FortiProxy versión 2.0.0, versión 1.2.8 y anteriores en el portal web SSL VPN permite a un atacante no autenticado realizar un ataque de denegación de servicio a través de cargas útiles de mensajes especiales"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS and FortiProxy","versions":[{"version":"FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:54.861955Z","id":"CVE-2018-13381","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.8","matchCriteriaId":"26F099AE-4482-4964-8B8A-1B412A423C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.14","matchCriteriaId":"0929E2F4-54B6-4D67-B694-EF1562E2B5F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.12","matchCriteriaId":"7F970C1D-5018-4D52-91F6-A5F2CD123935"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.10","matchCriteriaId":"9BC4C822-47EB-4EA0-834D-7A63D9F0E46D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"D8D27D2C-5211-41A7-B0F4-7721EE7884BF"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-387","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-232","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-13382","sourceIdentifier":"psirt@fortinet.com","published":"2019-06-04T21:29:00.373","lastModified":"2026-06-17T01:39:18.570","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests"},{"lang":"es","value":"Una vulnerabilidad de autorización inadecuada en Fortinet FortiOS versiones 6.0.0 a 6.0.4, 5.6.0 a 5.6.8 y 5.4.1 a 5.4.10 y FortiProxy versiones 2.0.0, 1.2.0 a 1.2.8, 1.1.0 a 1.1.6, 1.0.0 a 1.0.7 en el portal web SSL VPN permite a un atacante no autenticado modificar la contraseña de un usuario del portal web SSL VPN a través de peticiones HTTP especialmente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS, FortiProxy","versions":[{"version":"FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8, 5.4.1 to 5.4.10, FortiProxy 2.0.0, 1.2.0 to 1.2.8,  1.1.0 to 1.1.6, 1.0.0 to 1.0.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:31:11.882776Z","id":"CVE-2018-13382","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-01-10","cisaActionDue":"2022-07-10","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet FortiOS and FortiProxy Improper Authorization","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.9","matchCriteriaId":"4B47708E-8A92-4767-8685-49C3143D0920"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.1","versionEndExcluding":"5.4.11","matchCriteriaId":"250C33C2-29AD-4B75-BF05-E7256B4A5B54"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"5.6.9","matchCriteriaId":"7A60D8EF-E47F-45A9-8E40-0169609D9B7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.5","matchCriteriaId":"D37F1481-E7A7-4428-89C9-5DF9D206D056"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-389","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-231","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-13382","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2018-13384","sourceIdentifier":"psirt@fortinet.com","published":"2019-06-04T21:29:00.407","lastModified":"2026-06-17T01:39:18.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web domains."},{"lang":"es","value":"Una vulnerabilidad del Host Header Redirection en Fortinet FortiOS, en todas las versiones anteriores a la 6.0.5 en el portal web SSL VPN permite a un atacante remoto que envenene la memoria caché HTTP y, posteriormente, redirija en consecuencia a los usuarios del portal web SSL VPN a dominios web arbitrarios."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS all versions below 6.0.5","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:54.584287Z","id":"CVE-2018-13384","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.5","matchCriteriaId":"C1CDDF45-AA70-4684-B834-1ABEFEB7D105"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-002","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-5586","sourceIdentifier":"psirt@fortinet.com","published":"2019-06-04T22:29:00.237","lastModified":"2026-06-17T02:37:53.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 5.6.10, 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the \"param\" parameter of the error process HTTP requests."},{"lang":"es","value":"Una vulnerabilidad reflejada de Cross-Site-Scripting (XSS) en Fortinet FortiOS 5.2.0 a 5.6.10, 6.0.0 a 6.0.4 bajo el portal web SSL VPN puede permitir que un atacante ejecute el código de script malicioso no autorizado mediante el parámetro \"param\" de las solicitudes HTTP de proceso de error."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 5.2.0 to 6.0.4","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:51.816805Z","id":"CVE-2019-5586","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"6.0.4","matchCriteriaId":"6D2FB321-696D-44AE-92A7-3A66B4ED4B19"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/108610","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/advisory/FG-IR-19-034","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/108610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://fortiguard.com/advisory/FG-IR-19-034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-5587","sourceIdentifier":"psirt@fortinet.com","published":"2019-06-04T22:29:00.377","lastModified":"2026-06-17T02:37:53.733","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods."},{"lang":"es","value":"La ausencia de verificación de la integridad del sistema de archivos raíz en Fortinet Las imágenes de la aplicación FortiOS VM, todas las versiones inferiores a 6.0.5 pueden permitir al atacante implantar programas maliciosos en la imagen de instalación al volver a montar la imagen a través de métodos específicos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS all versions below 6.0.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:53.112644Z","id":"CVE-2019-5587","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.5","matchCriteriaId":"C1CDDF45-AA70-4684-B834-1ABEFEB7D105"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/108628","source":"psirt@fortinet.com","tags":["Broken Link"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-017","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/108628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-5588","sourceIdentifier":"psirt@fortinet.com","published":"2019-06-04T22:29:00.423","lastModified":"2026-06-17T02:37:53.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the \"err\" parameter of the error process HTTP requests."},{"lang":"es","value":"Una vulnerabilidad reflejada de Cross-Site-Scripting (XSS) en Fortinet FortiOS 6.0.0 a 6.0.4 bajo el portal web SSL VPN puede permitir que un atacante ejecute código de script malicioso no autorizado a través del parámetro \"err\" de las solicitudes HTTP del proceso de error."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.0.0 to 6.0.4","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:50.619727Z","id":"CVE-2019-5588","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"D8D27D2C-5211-41A7-B0F4-7721EE7884BF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/108618","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/advisory/FG-IR-19-034","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/108618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://fortiguard.com/advisory/FG-IR-19-034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-5592","sourceIdentifier":"psirt@fortinet.com","published":"2019-08-23T20:15:10.347","lastModified":"2026-06-17T02:37:54.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below, when configured with SSL Deep Inspection policies and with the IPS sensor enabled, may allow an attacker to decipher TLS connections going through the FortiGate via monitoring the traffic in a Man-in-the-middle position."},{"lang":"es","value":"Múltiples vulnerabilidades de relleno de Oracle (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) en la implementación de relleno CBC de FortiOS IPS motor versión 5.000 a 5.006, 4.000 a 4.036, 4.200 a 4.219, 3.547 y menores, cuando se configura con políticas de inspección profunda SSL y con el sensor IPS habilitado puede permitir que un atacante descifre las conexiones TLS que atraviesan el FortiGate a través del monitoreo del tráfico en una posición de hombre en el medio."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet IPS Engine","versions":[{"version":"IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:49.317412Z","id":"CVE-2019-5592","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"3.00547","matchCriteriaId":"830DC4A3-9C25-4314-9F20-BB6075605D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionStartIncluding":"4.00000","versionEndIncluding":"4.00036","matchCriteriaId":"4FB91C93-AFCA-4385-8999-71CB5BC1E6AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionStartIncluding":"4.00200","versionEndIncluding":"4.00219","matchCriteriaId":"52FCCBD8-CD08-4C75-8029-740B1C452066"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionStartIncluding":"5.00000","versionEndIncluding":"5.00006","matchCriteriaId":"E01C21FE-03D3-4374-8017-7CA189E3ED5A"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-145","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-6698","sourceIdentifier":"psirt@fortinet.com","published":"2019-08-23T20:15:10.427","lastModified":"2026-06-17T02:39:32.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device."},{"lang":"es","value":"El uso de la vulnerabilidad de Credenciales codificadas en FortiRecorder en todas las versiones anteriores a 2.7.4 puede permitir que un atacante no autenticado con conocimiento de las credenciales mencionadas y el acceso a la red de FortiCameras tome el control de ellas, siempre que estén administradas por un dispositivo FortiRecorder."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiRecorder","versions":[{"version":"FortiRecorder all versions below 2.7.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:02.953973Z","id":"CVE-2019-6698","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.7.4","matchCriteriaId":"2D383C63-3EE9-4285-8234-CD9ABDEDCFB4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortirecorder_100d:-:*:*:*:*:*:*:*","matchCriteriaId":"A46FAC06-A480-4DA2-94CA-F62E375FE852"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortirecorder_200d:-:*:*:*:*:*:*:*","matchCriteriaId":"22C395A3-045D-49A1-8388-7279BB812F50"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortirecorder_400d:-:*:*:*:*:*:*:*","matchCriteriaId":"A83F3798-7188-498A-95A7-FF4FB3EEC63A"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-185","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-13367","sourceIdentifier":"psirt@fortinet.com","published":"2019-08-23T21:15:10.600","lastModified":"2026-06-17T01:39:17.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI."},{"lang":"es","value":"Una vulnerabilidad de exposición a la información en FortiOS 6.2.3, 6.2.0 y posteriores puede permitir que un atacante no autenticado obtenga información de la plataforma, como la versión, los modelos, mediante el análisis de un archivo JavaScript a través de admin webUI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","versions":[{"version":"6.2.3","status":"affected"},{"version":"6.2.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:53.747664Z","id":"CVE-2018-13367","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.0","matchCriteriaId":"1023D06F-42D8-40DA-BEE0-A71397F58202"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-173","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-5594","sourceIdentifier":"psirt@fortinet.com","published":"2019-08-23T21:15:12.130","lastModified":"2026-06-17T02:37:54.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input During Web Page Generation (\"Cross-site Scripting\") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de páginas web (\"Cross-site Scripting\") en Fortinet FortiNAC 8.3.0 a 8.3.6 y 8.5.0 admin webUI puede permitir que un atacante no autenticado realice un ataque XSS reflejado a través del campo de búsqueda en el webUI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiNAC","versions":[{"version":"FortiNAC 8.3.0 to 8.3.6 and 8.5.0","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:48.118067Z","id":"CVE-2019-5594","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndIncluding":"8.3.6","matchCriteriaId":"8A3925F5-BA4F-406D-A38F-3EFC8D0083BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"4E16B46B-FA2D-4208-9DBC-AD0DF3344DE1"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-140","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-6695","sourceIdentifier":"psirt@fortinet.com","published":"2019-08-23T21:15:12.193","lastModified":"2026-06-17T02:39:31.757","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-party programs by recreating the image through specific methods."},{"lang":"es","value":"La falta de comprobación de integridad del sistema de archivos raíz en las imágenes de la aplicación Fortinet FortiManager VM de 6.2.0, 6.0.6 y posteriores puede permitir que un atacante implante programas de terceros al recrear la imagen a través de métodos específicos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiManager","versions":[{"version":"FortiManager all versions below 6.2.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:01.608708Z","id":"CVE-2019-6695","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:virtual_machine:*:*:*","versionEndIncluding":"6.0.6","matchCriteriaId":"D22EE25F-4B99-4BCE-A312-1B9D59352B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"32A28F3B-4C02-43AA-8261-7FF3A0C0E58D"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-017","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-5590","sourceIdentifier":"psirt@fortinet.com","published":"2019-08-28T17:15:09.917","lastModified":"2026-06-17T02:37:54.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to execute unauthorized code or commands (Cross Site Scripting) via attack reports generated in HTML form."},{"lang":"es","value":"La parte de la URL del mensaje de reporte no está codificada en Fortinet FortiWeb versión 6.0.2 y siguientes, lo que puede permitir a un atacante ejecutar código o comandos no autorizados (Cross Site Scripting) por medio de reportes de ataque generados en formato HTML."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","versions":[{"version":"6.0.2 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:46.848115Z","id":"CVE-2019-5590","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2","matchCriteriaId":"4A666632-0C55-4DEC-9E4F-0FA7F7E6EB32"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/108786","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-070","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/108786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-15703","sourceIdentifier":"psirt@fortinet.com","published":"2019-10-24T14:15:11.003","lastModified":"2026-06-17T02:20:54.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable hardware TRNG token and models not support builtin TRNG seed allows attacker to theoretically recover the long term ECDSA secret in a TLS client with a RSA handshake and mutual ECDSA authentication via the help of flush+reload side channel attacks in FortiGate VM models only."},{"lang":"es","value":"Una Entropía Insuficiente en la vulnerabilidad del PRNG en Fortinet FortiOS versión 6.2.1, 6.2.0, 6.0.8 y posteriores, para dispositivos que no habilitan token TRNG de hardware y modelos que no admiten un seed TRNG incorporado permite al atacante recuperar teóricamente el secreto ECDSA a largo plazo en un cliente TLS con un protocolo de enlace RSA y autenticación mutua ECDSA mediante la ayuda de los ataques de canal lateral flush+reload solo en los modelos FortiGate VM."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"6.2.1","status":"affected"},{"version":"6.2.0","status":"affected"},{"version":"6.0.8 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:52.556651Z","id":"CVE-2019-15703","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-331"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.9","matchCriteriaId":"9C424D53-2941-43BA-B4BA-FE6C06B08190"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.9","matchCriteriaId":"C2F4F708-941B-4EBD-9DAB-D726887B63DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.3","matchCriteriaId":"7EE3901A-D32C-44DD-8977-87B4A4B6F3FE"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-186","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-6692","sourceIdentifier":"psirt@fortinet.com","published":"2019-10-24T14:15:11.647","lastModified":"2026-06-17T02:39:31.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows a privileged attacker to perform arbitrary code execution via forging that DLL."},{"lang":"es","value":"Una vulnerabilidad de precarga maliciosa de DLL en Fortinet FortiClient para Windows versión 6.2.0 y anteriores, permite a un atacante privilegiado realizar una ejecución de código arbitrario mediante la falsificación de esa DLL."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiClient for Windows","versions":[{"version":"FortiClient for Windows 6.2.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:50.986361Z","id":"CVE-2019-6692","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndIncluding":"6.2.0","matchCriteriaId":"216431F7-EB86-4401-B22C-5E3D07531AB0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-148","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-15710","sourceIdentifier":"psirt@fortinet.com","published":"2019-10-31T20:15:11.100","lastModified":"2026-06-17T02:20:55.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted \"execute date\" commands."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos de Sistema Operativo en FortiExtender versión 4.1.0 a 4.1.1, versión 4.0.0 y anteriores en la consola de administración de la CLI puede permitir que administradores no autorizados ejecuten comandos arbitrarios a nivel del sistema por medio de comandos de \"execute date\" especialmente diseñados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiExtender","versions":[{"version":"4.1.0 to 4.1.1","status":"affected"},{"version":"4.0.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:49.759787Z","id":"CVE-2019-15710","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortiguard:fortiextender_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.1","matchCriteriaId":"93E3F6EC-6DDB-48F3-AC58-801B6AFC6E0E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortiguard:fortiextender:-:*:*:*:*:*:*:*","matchCriteriaId":"E7AA5432-CDD1-4038-8B21-0ACD29EC73A6"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-273","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-9195","sourceIdentifier":"psirt@fortinet.com","published":"2019-11-21T15:15:12.477","lastModified":"2026-06-17T02:06:13.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use of a hardcoded cryptographic key in the FortiGuard services communication protocol may allow a Man in the middle with knowledge of the key to eavesdrop on and modify information (URL/SPAM services in FortiOS 5.6, and URL/SPAM/AV services in FortiOS 6.0.; URL rating in FortiClient) sent and received from Fortiguard severs by decrypting these messages. Affected products include FortiClient for Windows 6.0.6 and below, FortiOS 6.0.7 and below, FortiClient for Mac OS 6.2.1 and below."},{"lang":"es","value":"El uso de una clave criptográfica codificada en el protocolo de comunicación de servicios FortiGuard puede permitir que un Hombre en el medio con conocimiento de la clave escuche y modifique información (servicios URL / SPAM en FortiOS 5.6 y servicios URL / SPAM / AV en FortiOS 6.0). ; Clasificación de URL en FortiClient) enviado y recibido de los servidores de Fortiguard al descifrar estos mensajes. Los productos afectados incluyen FortiClient para Windows 6.0.6 y versiones anteriores, FortiOS 6.0.7 y versiones anteriores , FortiClient para Mac OS 6.2.1 y versiones anteriores."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClient for Windows","versions":[{"version":"FortiClient for Windows 6.0.6 and below","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","versions":[{"version":"FortiOS 6.0.7 and below","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClient for Mac OS","versions":[{"version":"FortiClient for Mac OS 6.2.1 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:44.386046Z","id":"CVE-2018-9195","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndIncluding":"6.0.6","matchCriteriaId":"FA6A19E5-0059-4F94-A8D8-BBFF6B8C0C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionEndIncluding":"6.2.1","matchCriteriaId":"A481CDA4-13C2-4929-934B-B09590E721A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.6","matchCriteriaId":"B9A44C4B-988B-45E4-BA76-8984A9AB9AB0"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-100","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-15704","sourceIdentifier":"psirt@fortinet.com","published":"2019-11-21T15:15:13.823","lastModified":"2026-06-17T02:20:54.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway."},{"lang":"es","value":"Una vulnerabilidad de almacenamiento información confidencial en texto sin cifrar en FortiClient para Mac, puede permitir a un atacante local leer información confidencial registrada en la ventana de la consola cuando el usuario se conecta a un SSL VPN Gateway."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClient for Mac OS","versions":[{"version":"FortiClient for Mac OS 6.2.0","status":"affected"},{"version":"6.0.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:45.589688Z","id":"CVE-2019-15704","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-311"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"EA130446-C10F-4401-9870-77CA235152F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:6.2.0:*:*:*:*:macos:*:*","matchCriteriaId":"ABA08CE1-70EE-455E-85C5-49EE2E30D751"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-227","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-17650","sourceIdentifier":"psirt@fortinet.com","published":"2019-11-21T16:15:12.860","lastModified":"2026-06-17T02:24:20.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to execute unauthorized code as root by bypassing a security check."},{"lang":"es","value":"Una Neutralización Inapropiada de Elementos Especiales utilizada en una vulnerabilidad de Comandos en uno de los procesos root de FortiClient para Mac OS, puede permitir a un usuario local del sistema en el que se está ejecutando FortiClient ejecutar código no autorizado como root mediante la omisión de una comprobación de seguridad."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClient for Mac OS","versions":[{"version":"FortiClient for Mac OS 6.2.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:48.376177Z","id":"CVE-2019-17650","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionEndIncluding":"6.2.1","matchCriteriaId":"A481CDA4-13C2-4929-934B-B09590E721A8"}]}]}],"references":[{"url":"https://danishcyberdefence.dk/blog/forticlient_mac","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/advisory/FG-IR-19-210","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://danishcyberdefence.dk/blog/forticlient_mac","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://fortiguard.com/advisory/FG-IR-19-210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-6693","sourceIdentifier":"psirt@fortinet.com","published":"2019-11-21T16:15:13.173","lastModified":"2026-08-04T05:16:27.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data includes users' passwords (except the administrator's password), private keys' passphrases and High Availability password (when set)."},{"lang":"es","value":"El uso de una clave criptográfica embebida para cifrar datos confidenciales en el archivo de respaldo de configuración de FortiOS, puede permitir a un atacante con acceso al archivo de respaldo descifrar los datos confidenciales, por medio del conocimiento de la clave embebida. Los datos confidenciales mencionados anteriormente incluyen las contraseñas de los usuarios (excepto la contraseña del administrador), las frases de contraseña de las claves privadas y la contraseña de alta disponibilidad (cuando se establecen)."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiGate","versions":[{"version":"5.6.9 and below","status":"affected"},{"version":"6.0.5 and below","status":"affected"},{"version":"6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-23T00:00:00+00:00","id":"CVE-2019-6693","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-06-25","cisaActionDue":"2025-07-16","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.10","matchCriteriaId":"DBDD29F8-B339-4C3B-AF3F-77BB3D323D1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"8FA4CED9-EAB9-4FE4-B058-CC4D3E03C520"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72C437B7-75F8-4DDC-9670-19E2C21ACB27"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-007","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-6693","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2019-15705","sourceIdentifier":"psirt@fortinet.com","published":"2019-11-27T21:15:12.747","lastModified":"2026-06-17T02:20:54.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and below may allow an unauthenticated remote attacker to crash the SSL VPN service by sending a crafted POST request."},{"lang":"es","value":"Una vulnerabilidad de Comprobación de Entrada Inapropiada en el portal VPN SSL de FortiOS versiones 6.2.1 y posteriores, y versiones 6.0.6 y posteriores, puede permitir a un atacante remoto no identificado bloquear el servicio VPN SSL enviando una petición POST especialmente diseñada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiGate","versions":[{"version":"FortiOS versions 6.2.1 and below","status":"affected"},{"version":"FortiOS versions 6.0.6 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:51.320087Z","id":"CVE-2019-15705","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.6","matchCriteriaId":"B9A44C4B-988B-45E4-BA76-8984A9AB9AB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.1","matchCriteriaId":"D526BAA8-202A-40A9-87F9-68FB597299E6"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-236","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-16154","sourceIdentifier":"psirt@fortinet.com","published":"2020-01-07T19:15:10.617","lastModified":"2026-06-17T02:21:46.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack (XSS) via a parameter of the logon page."},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de página web en FortiAuthenticator WEB UI versión 6.0.0, puede permitir a un usuario no autenticado llevar a cabo un ataque de tipo cross-site scripting (XSS) por medio de un parámetro de la página de inicio de sesión."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator WEB UI","versions":[{"version":"6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:39.924250Z","id":"CVE-2019-16154","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5DCB90CE-D124-410B-A43A-0F9DC69672E3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-104","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-6700","sourceIdentifier":"psirt@fortinet.com","published":"2020-01-07T19:15:10.993","lastModified":"2026-06-17T02:39:32.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code."},{"lang":"es","value":"Una vulnerabilidad de exposición de información en el formulario del perfil de autenticación externo de FortiSIEM versiones 5.2.2 y anteriores, puede permitir a un atacante autenticado recuperar la contraseña de autenticación externa por medio del código fuente HTML."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiSIEM","versions":[{"version":"FortiSIEM 5.2.2 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:41.043235Z","id":"CVE-2019-6700","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionEndExcluding":"5.2.5","matchCriteriaId":"86F84B70-FF2D-4A94-96C3-49BDC4FA68CD"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-100","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-16153","sourceIdentifier":"psirt@fortinet.com","published":"2020-01-23T17:15:11.830","lastModified":"2026-06-17T02:21:46.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials."},{"lang":"es","value":"Una vulnerabilidad de contraseña embebida en el componente base de datos de Fortinet FortiSIEM versión 5.2.5 y por debajo, puede permitir a atacantes acceder a la base de datos del dispositivo mediante el uso de credenciales estáticas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSIEM","versions":[{"version":"FortiSIEM 5.2.5 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:11:00.215827Z","id":"CVE-2019-16153","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.2.5","matchCriteriaId":"76E3B8F9-16E5-40AA-94E8-D4C1DA9105C0"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-195","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-5593","sourceIdentifier":"psirt@fortinet.com","published":"2020-01-23T17:15:12.173","lastModified":"2026-06-17T02:37:54.403","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6, 5.6.10 and below or for user uploaded local certificates via setting an empty password in FortiOS 6.2.1, 6.2.0, 6.0.6 and below."},{"lang":"es","value":"Una comprobación inapropiada de permisos o valores en la consola de la CLI puede permitir a un usuario no privilegiado obtener claves privadas en texto plano de Fortinet FortiOS de los certificados locales incorporados del sistema mediante la desconfiguración de la contraseña de cifrado de claves en FortiOS versión 6.2.0, versiones 6.0.0 hasta 6.0.6, y versiones 5.6.10 y por debajo, o por un usuario que cargó certificados locales mediante la configuración de una contraseña vacía en FortiOS versiones 6.2.1, 6.2.0, y versiones 6.0.6 y por debajo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.2.0 to 6.2.1, 6.0.6 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:38.518298Z","id":"CVE-2019-5593","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-755"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.10","matchCriteriaId":"DBDD29F8-B339-4C3B-AF3F-77BB3D323D1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"8FA4CED9-EAB9-4FE4-B058-CC4D3E03C520"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72C437B7-75F8-4DDC-9670-19E2C21ACB27"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-134","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-15707","sourceIdentifier":"psirt@fortinet.com","published":"2020-01-23T18:15:13.197","lastModified":"2026-06-17T02:20:54.813","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado en la Interfaz de Usuario Web del administrador de FortiMail versiones 6.2.0, 6.0.0 hasta 6.0.6, 5.4.10 y posteriores, puede permitir a administradores llevar a cabo descargas de la configuración de respaldo del sistema, a la que no deberían estar autorizados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiMail","versions":[{"version":"FortiMail 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:37.262634Z","id":"CVE-2019-15707","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.10","matchCriteriaId":"6A0943A1-AE18-416D-BD0B-C519939E4F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"2FBF1D4B-31F8-4854-A5DC-CD7EA70D889E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4FCC28EF-A732-4B0A-8F2D-217D4C66617F"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-237","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-15712","sourceIdentifier":"psirt@fortinet.com","published":"2020-01-23T18:15:13.273","lastModified":"2026-06-17T02:20:55.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado en la Interfaz de Usuario Web del administrador de FortiMail versiones 6.2.0, 6.0.0 hasta 6.0.6, 5.4.10 y posteriores, puede permitir a administradores acceder a la consola web, a la que no deberían estar autorizados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiMail","versions":[{"version":"FortiMail 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:46.811950Z","id":"CVE-2019-15712","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.10","matchCriteriaId":"6A0943A1-AE18-416D-BD0B-C519939E4F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"2FBF1D4B-31F8-4854-A5DC-CD7EA70D889E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4FCC28EF-A732-4B0A-8F2D-217D4C66617F"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-237","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-17651","sourceIdentifier":"psirt@fortinet.com","published":"2020-01-28T01:15:11.050","lastModified":"2026-06-17T02:24:20.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM version 5.2.5 and below may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious JavaScript code into the description field of a Device Maintenance schedule."},{"lang":"es","value":"Una vulnerabilidad de Neutralización Inadecuada de Entrada en los parámetros description y title de un Programa de Mantenimiento de Dispositivo en FortiSIEM versión 5.2.5 y por debajo, puede permitir a un atacante autenticado remoto llevar a cabo un ataque de tipo Cross Site Scripting (XSS) Almacenado mediante la inyección de código JavaScript malicioso en el campo description de un programa de Mantenimiento de Dispositivo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSIEM","versions":[{"version":"FortiSIEM version 5.2.5 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:35.873274Z","id":"CVE-2019-17651","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.5","matchCriteriaId":"3A87978B-15D8-4FF4-B158-C2D8CDEB7C07"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-197","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-15711","sourceIdentifier":"psirt@fortinet.com","published":"2020-02-06T16:15:12.213","lastModified":"2026-06-17T02:20:55.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted \"ExportLogs\" type IPC client requests to the fctsched process."},{"lang":"es","value":"Una vulnerabilidad de escalada de privilegios en FortiClient para Linux versiones 6.2.1 y posteriores, puede permitir a un usuario con privilegios bajos ejecutar comandos del sistema con privilegios de root mediante una inyección de peticiones del cliente IPC de tipo \"ExportLogs\" especialmente diseñadas hacia el proceso fctsched."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientLinux","versions":[{"version":"FortiClientLinux 6.2.1 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:45.552513Z","id":"CVE-2019-15711","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionEndIncluding":"6.2.1","matchCriteriaId":"E48E9C78-9690-4FC2-86A8-290DF7321A57"}]}]}],"references":[{"url":"https://danishcyberdefence.dk/blog/forticlient_linux","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-238","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://danishcyberdefence.dk/blog/forticlient_linux","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-16152","sourceIdentifier":"psirt@fortinet.com","published":"2020-02-06T16:15:12.277","lastModified":"2026-06-17T02:21:46.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly validated."},{"lang":"es","value":"Una vulnerabilidad de denegación de servicio (DoS) en FortiClient para Linux versiones 6.2.1 y posteriores, puede permitir a un usuario con privilegios bajos causar que los procesos de FortiClient se ejecuten bajo bloqueos de los privilegios root mediante el envío de peticiones del cliente IPC especialmente diseñadas hacia el proceso fctsched debido a que el nanomsg no ha sido validado correctamente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientLinux","versions":[{"version":"FortiClientLinux 6.2.1 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:32.641067Z","id":"CVE-2019-16152","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionEndIncluding":"6.2.1","matchCriteriaId":"E48E9C78-9690-4FC2-86A8-290DF7321A57"}]}]}],"references":[{"url":"https://danishcyberdefence.dk/blog/forticlient_linux","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-238","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://danishcyberdefence.dk/blog/forticlient_linux","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-17652","sourceIdentifier":"psirt@fortinet.com","published":"2020-02-06T16:15:12.353","lastModified":"2026-06-17T02:24:21.113","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to cause FortiClient processes running under root priviledge crashes via sending specially crafted \"StartAvCustomScan\" type IPC client requests to the fctsched process due the argv data not been well sanitized."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento del búfer de la pila en FortiClient para Linux versiones 6.2.1 y posteriores, puede permitir a un usuario con privilegios bajos causar que los procesos de FortiClient se ejecuten bajo bloqueos de los privilegios root mediante el envío de peticiones del cliente IPC de tipo \"StartAvCustomScan\" especialmente diseñadas hacia el proceso fctsched debido a que los datos argv no han sido bien saneados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientLinux","versions":[{"version":"FortiClientLinux 6.2.1 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:34.606481Z","id":"CVE-2019-17652","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionEndIncluding":"6.2.1","matchCriteriaId":"E48E9C78-9690-4FC2-86A8-290DF7321A57"}]}]}],"references":[{"url":"https://danishcyberdefence.dk/blog/forticlient_linux","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-238","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://danishcyberdefence.dk/blog/forticlient_linux","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-16155","sourceIdentifier":"psirt@fortinet.com","published":"2020-02-07T15:15:11.757","lastModified":"2026-06-17T02:21:47.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to overwrite system files as root with arbitrary content through system backup file via specially crafted \"BackupConfig\" type IPC client requests to the fctsched process. Further more, FortiClient for Linux 6.2.2 and below allow low privilege user write the system backup file under root privilege through GUI thus can cause root system file overwrite."},{"lang":"es","value":"Una vulnerabilidad de escalada de privilegios en FortiClient para Linux versiones 6.2.1 y posteriores, puede permitir a un usuario con privilegios bajos sobrescribir los archivos del sistema como root con contenido arbitrario por medio del archivo de copia de seguridad del sistema mediante peticiones de cliente IPC tipo \"BackupConfig\" especialmente diseñadas para el proceso fctsched. Además, FortiClient para Linux versiones 6.2.2 y posteriores, permiten a usuarios con pocos privilegios escribir el archivo de copia de seguridad del sistema con privilegios root por medio de la GUI, por lo que pueden causar una sobrescritura del archivo del sistema root."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientLinux","versions":[{"version":"FortiClientLinux 6.2.1 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","baseScore":6.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:31.046863Z","id":"CVE-2019-16155","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionEndIncluding":"6.2.1","matchCriteriaId":"E48E9C78-9690-4FC2-86A8-290DF7321A57"}]}]}],"references":[{"url":"https://danishcyberdefence.dk/blog/forticlient_linux","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-238","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://danishcyberdefence.dk/blog/forticlient_linux","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-16156","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-12T22:15:14.827","lastModified":"2026-06-17T02:21:47.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack (XSS)."},{"lang":"es","value":"Una vulnerabilidad de Neutralización de Entrada Inapropiada en el Anomaly Detection Parameter Name en Fortinet FortiWeb versiones 6.0.5, 6.2.0 y 6.1.1, puede permitir a un atacante remoto no autenticado llevar a cabo un ataque de tipo Cross Site Scripting (XSS)."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"6.0.5","status":"affected"},{"version":"6.2.0","status":"affected"},{"version":"6.1.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:29.250000Z","id":"CVE-2019-16156","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.5","matchCriteriaId":"55588AD5-D5FA-45D2-BC97-33430505B07C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.1","matchCriteriaId":"BC79F3A5-AE1D-40FF-9A07-095644A08BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"02FFC1FF-0467-4B95-857E-C515507BB17D"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-265","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-17658","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-12T22:15:14.907","lastModified":"2026-06-17T02:24:21.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executable service path."},{"lang":"es","value":"Una vulnerabilidad de ruta de servicio no citada en el componente FortiTray de FortiClient de FortiClientWindows versiones v6.2.2 y anteriores, permite a un atacante alcanzar privilegios elevados por medio de la ruta de servicio ejecutable de FortiClientConsole."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientWindows","versions":[{"version":"6.2.2 and prior","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:10:58.825116Z","id":"CVE-2019-17658","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-428"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.9","matchCriteriaId":"4BF4B4CA-81E0-42EA-9EA4-66A4414345C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.2","matchCriteriaId":"7FE45D19-F077-4E54-B695-8F7EABFA9870"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-281","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-6643","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-12T22:15:15.780","lastModified":"2026-06-17T03:23:42.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to perform a cross site scripting attack (XSS)."},{"lang":"es","value":"Una neutralización inapropiada de la vulnerabilidad de entrada en la URL Description en Fortinet FortiIsolator versión 1.2.2, permite a un atacante autenticado remoto llevar a cabo un ataque de tipo cross site scripting (XSS)."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiIsolator","versions":[{"version":"1.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:27.992178Z","id":"CVE-2020-6643","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.2","matchCriteriaId":"929753BA-886E-4083-AB60-BE1C824C13F2"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-270","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-17653","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-12T23:15:11.703","lastModified":"2026-06-17T02:24:21.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link."},{"lang":"es","value":"Una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en la interfaz de usuario de Fortinet FortiSIEM versión 5.2.5, podría permitir a un atacante no autenticado remoto llevar a cabo acciones arbitrarias usando una sesión de usuario autenticado, al persuadir a la víctima a seguir un enlace malicioso."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSIEM","versions":[{"version":"5.2.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:44.199682Z","id":"CVE-2019-17653","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4B114C6F-82AF-4ADF-B840-61851B9E39C9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-240","source":"psirt@fortinet.com","tags":["Broken Link"]},{"url":"https://fortiguard.com/psirt/%20FG-IR-19-240","source":"nvd@nist.gov","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2019-16157","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-13T16:15:11.893","lastModified":"2026-06-17T02:21:47.293","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to view sensitive information being logged via diagnose debug commands."},{"lang":"es","value":"Una vulnerabilidad de exposición de información en el CLI de Fortinet FortiWeb versiones 6.2.0 y anteriores, puede permitir a un usuario autentificado visualizar información confidencial que está siendo registrada por medio de comandos de depuración de diagnóstico."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"6.2.0 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:26.686972Z","id":"CVE-2019-16157","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.0","matchCriteriaId":"72FF847A-2857-4482-B458-2EF81EC17DE0"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-269","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-6699","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-13T16:15:12.113","lastModified":"2026-06-17T02:39:32.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier may allow an attacker to execute a stored Cross Site Scripting (XSS) via a field in the traffic group interface."},{"lang":"es","value":"Una vulnerabilidad de neutralización de entrada inapropiada en Fortinet FortiADC versiones anteriores a 5.3.3, puede permitir a un atacante ejecutar un ataque de tipo Cross Site Scripting (XSS) almacenado por medio de un campo en la interfaz de traffic group."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiADC","versions":[{"version":"5.3.3 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:25.252354Z","id":"CVE-2019-6699","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.3","matchCriteriaId":"71119E62-531B-42BF-893F-4CEF3DD63BF1"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-220","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-9287","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-15T22:15:15.020","lastModified":"2026-10-13T18:17:11.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A untrusted search path vulnerability in Fortinet  may allow attacker to execute unauthorized code or commands via network exploitable"},{"lang":"es","value":"Una vulnerabilidad de Ruta de búsqueda No Segura en FortiClient EMS online installer versiones 6.2.1 y por debajo, puede permitir que un atacante local, con control sobre el directorio en el archivo FortiClientEMSOnlineInstaller.exe, ejecute código arbitrario en el sistema por medio de una carga de archivos maliciosos de la Filter Library DLL en ese directorio."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:06.02.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.0.*:*:*:*:*:*:*:*"],"versions":[{"version":"06.02.00","lessThanOrEqual":"06.02.01","versionType":"semver","status":"affected"},{"version":"6.0.8","status":"affected"},{"version":"06.00.00","lessThanOrEqual":"06.00.06","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThan":"6.0.*","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":7.7,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:41.584282Z","id":"CVE-2020-9287","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_emergency_management_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.1","matchCriteriaId":"7733AB03-F267-486F-8699-976B3999D8D5"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-19-060","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/psirt/FG-IR-19-060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-9290","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-15T22:15:15.097","lastModified":"2026-10-13T18:17:11.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A untrusted search path vulnerability in Fortinet  may allow attacker to execute unauthorized code or commands via network exploitable"},{"lang":"es","value":"Una vulnerabilidad de Ruta de Búsqueda No Segura en FortiClient for Windows online installer versiones 6.2.3 y por debajo, puede permitir que un atacante local, con control sobre el directorio en el cual reside los archivos FortiClientOnlineInstaller.exe y FortiClientVPNOnlineInstaller.exe, ejecute código arbitrario en el sistema por medio una carga de archivos maliciosos de la Filter Library DLL en ese directorio."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:6.2.3:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:42.827614Z","id":"CVE-2020-9290","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndIncluding":"6.2.3","matchCriteriaId":"0DA6BEE8-D1DC-45F4-B281-0C71048321F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_virtual_private_network:*:*:*:*:*:windows:*:*","versionEndIncluding":"6.2.3","matchCriteriaId":"CA3BC9BE-71B4-4ABE-A709-662784EE2100"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-19-060","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/psirt/FG-IR-19-060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-15708","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-15T23:15:11.327","lastModified":"2026-06-17T02:20:54.937","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos de sistema en el FortiAP-S/W2 versiones 6.2.1, 6.2.0, 6.0.5 y por debajo, FortiAP versiones 6.0.5 y por debajo y FortiAP-U versiones por debajo de 6.0.0, bajo la consola de administración de la CLI puede permitir a administradores no autorizados ejecutar comandos arbitrarios a nivel de sistema por medio de comandos ifconfig especialmente diseñados ."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAP-S/W2","versions":[{"version":"6.2.1","status":"affected"},{"version":"6.2.0","status":"affected"},{"version":"6.0.5 and below","status":"affected"}]},{"vendor":"Fortinet","product":"Fortinet FortiAP-U","versions":[{"version":"6.0.5 and below","status":"affected"}]},{"vendor":"Fortinet","product":"Fortinet FortiAP","versions":[{"version":"below 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:38.903696Z","id":"CVE-2019-15708","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5","matchCriteriaId":"B49D7931-B85F-43CF-A856-CAC551B94484"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-s:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5","matchCriteriaId":"44FA41F6-6B1E-4296-B221-0AA4AACCBE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-s:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D024C9D-DB39-408A-B015-3DCC40512C6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-s:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"79A8F245-922D-42AE-9DF1-A9292A1D97C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.0","matchCriteriaId":"AB24E73E-8279-44F3-9DA2-76F5B0E5D7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5","matchCriteriaId":"7D8279FB-CB12-4C59-901A-D96CE162E855"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"63F06A65-ADF7-4284-A00C-B5E862441722"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FE3508FA-E206-4377-AE36-DDD6691EA3A7"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-209","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-17654","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-15T23:15:11.407","lastModified":"2026-06-17T02:24:21.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform a Cross-Site WebSocket Hijacking (CSWSH) attack."},{"lang":"es","value":"Una vulnerabilidad de Verificación Insuficiente de la Autenticidad de Datos en FortiManager versiones 6.2.1, 6.2.0, 6.0.6 y por debajo, puede permitir a un atacante no autenticado llevar a cabo un ataque de tipo Cross-Site WebSocket Hijacking (CSWSH)."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager","versions":[{"version":"6.2.1","status":"affected"},{"version":"6.2.0","status":"affected"},{"version":"6.0.6 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:40.280141Z","id":"CVE-2019-17654","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.6","matchCriteriaId":"6E5A3BD6-6F0C-45EE-A7F1-ECA2A4EF3280"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"32A28F3B-4C02-43AA-8261-7FF3A0C0E58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6CF79D86-E22A-4C6F-BD1C-A45364D51900"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-191","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-6696","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-15T23:15:11.470","lastModified":"2026-06-17T02:39:31.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage."},{"lang":"es","value":"Una vulnerabilidad de comprobación de entrada inapropiada en FortiOS versiones 6.2.1, 6.2.0, 6.0.8 y por debajo hasta 5.4.0, bajo la Interfaz de Usuario Web de administración puede permitir a un atacante llevar a cabo un ataque de redireccionamiento de URL por medio de una petición específicamente diseñada para la página web de cambio de contraseña inicial del administrador."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"6.2.1","status":"affected"},{"version":"6.2.0","status":"affected"},{"version":"6.0.8 and below until 5.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:23.796547Z","id":"CVE-2019-6696","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"6.0.8","matchCriteriaId":"21713C4E-4504-4901-BCB0-389FA7561B60"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72C437B7-75F8-4DDC-9670-19E2C21ACB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B468AF9F-1619-4399-A1A5-115C26FB01DA"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-179","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-6646","sourceIdentifier":"psirt@fortinet.com","published":"2020-03-17T13:15:12.027","lastModified":"2026-06-17T03:23:43.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Disclaimer Description of a Replacement Message."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de entrada en FortiWeb, permite a un atacante autenticado remoto realizar un ataque de tipo cross-site scripting (XSS) almacenado por medio del Disclaimer Description de un Replacement Message."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:22.473305Z","id":"CVE-2020-6646","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.2","matchCriteriaId":"8DA3A819-7A9D-49EB-8B0D-609FC3AF0065"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"19CFFD6E-3503-4910-9490-2DA13A6FA600"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-001","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-13371","sourceIdentifier":"psirt@fortinet.com","published":"2020-04-02T14:15:14.217","lastModified":"2026-06-17T01:39:17.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component."},{"lang":"es","value":"Una vulnerabilidad de control externo de sistema en FortiOS, puede permitir a un usuario autenticado y regular cambiar la configuración de enrutamiento del dispositivo por medio de una conexión al componente ZebOS."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiOS","versions":[{"version":"6.2.0 and below versions","status":"affected"},{"version":"5.6.7 and below","status":"affected"},{"version":"5.4.10 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:37.755850Z","id":"CVE-2018-13371","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.10","matchCriteriaId":"C4BC8404-3E6F-4D98-885C-F8F53FF4BF07"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.7","matchCriteriaId":"8CC23731-E080-43CF-9BB8-149FC0173388"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.2","matchCriteriaId":"3439843C-BC01-4AEB-AC43-3D7B9D838044"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-18-230","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-18-230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-17657","sourceIdentifier":"psirt@fortinet.com","published":"2020-04-07T18:15:13.510","lastModified":"2026-06-17T02:24:21.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces slowly, as demonstrated by Slow HTTP DoS Attacks."},{"lang":"es","value":"Una vulnerabilidad de Consumo No Controlado de Recursos en Fortinet FortiSwitch por debajo de las versiones 3.6.11, 6.0.6 y 6.2.2, FortiAnalyzer por debajo de las versiones 6.2.3, FortiManager por debajo de las funciones 6.2.3 y FortiAP-S/W2 por debajo de las versiones 6.2.2, puede permitir a un atacante causar una denegación de servicio (DoS) de la Interfaz de Usuario Web Administrativa mediante el manejo de peticiones y respuestas HTTP especialmente diseñadas en partes lentamente, como es demostrado por los Ataques de DoS de HTTP Lento."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiSwitch","versions":[{"version":"below 3.6.11","status":"affected"},{"version":"6.0.6 and 6.2.2","status":"affected"}]},{"vendor":"n/a","product":"FortiAnalyzer","versions":[{"version":"below 6.2.3","status":"affected"}]},{"vendor":"n/a","product":"FortiManager","versions":[{"version":"below 6.2.3","status":"affected"}]},{"vendor":"n/a","product":"FortiAP-S/W2","versions":[{"version":"below 6.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:50.087531Z","id":"CVE-2019-17657","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.3","matchCriteriaId":"CBC118F5-8118-4767-A9FB-CCFBB2DFF3F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-s:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.2","matchCriteriaId":"9E6E6044-AADA-4674-B9DD-7D39D459BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.2","matchCriteriaId":"F3BBB116-CC43-4E5D-AAA7-BFBE1BD26886"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.3","matchCriteriaId":"EB9669E6-96CA-4391-8515-2ACB349CF4C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionEndExcluding":"3.6.11","matchCriteriaId":"05F67FC3-A4F2-48E1-BB1F-36D993958DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.6","matchCriteriaId":"826D813D-CC19-4B72-918E-AFCFA1C0A30E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.2","matchCriteriaId":"7D4A4EE4-D0A7-44A9-931B-577ECDAB808B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-013","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-6647","sourceIdentifier":"psirt@fortinet.com","published":"2020-04-07T19:15:13.127","lastModified":"2026-06-17T03:23:43.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site scripting attack (XSS) via the name parameter."},{"lang":"es","value":"Una vulnerabilidad de neutralización de entrada inapropiada en el panel de FortiADC puede permitir a un atacante autenticado llevar a cabo un ataque de tipo cross site scripting (XSS) por medio del parámetro name."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiADC","versions":[{"version":"FortiADC 5.4.0 and 5.3.x before 5.3.5.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:20.957534Z","id":"CVE-2020-6647","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiadc_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.4","matchCriteriaId":"1D413B68-9227-4FB6-9C96-2BE1FB71BBDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiadc_firmware:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C027B9-B507-41E5-865D-52F460C7C219"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-012","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-9286","sourceIdentifier":"psirt@fortinet.com","published":"2020-04-07T19:15:13.173","lastModified":"2026-06-17T03:27:42.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system."},{"lang":"es","value":"Una vulnerabilidad de autorización inapropiada en FortiADC puede permitir a un usuario autenticado remoto con bajos privilegios llevar a cabo determinadas acciones, como reiniciar el sistema."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"FortiADC","versions":[{"version":"FortiADC 5.3.3 and earlier.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:19.316176Z","id":"CVE-2020-9286","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiadc_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.4","matchCriteriaId":"1D413B68-9227-4FB6-9C96-2BE1FB71BBDF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiadc:-:*:*:*:*:*:*:*","matchCriteriaId":"00B7C904-528A-48D2-B0F8-9AC9FCEA25FC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-013","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-9294","sourceIdentifier":"psirt@fortinet.com","published":"2020-04-27T17:15:13.593","lastModified":"2026-06-17T03:27:43.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface."},{"lang":"es","value":"Una vulnerabilidad de autenticación inapropiada en FortiMail versiones 5.4.10, 6.0.7, 6.2.2 y anteriores y en FortiVoiceEntreprise versiones 6.0.0 y 6.0.1, puede permitir a un atacante remoto no autenticado acceder al sistema como usuario legítimo al solicitar un cambio de contraseña por medio de la interfaz de usuario."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","versions":[{"version":"5.4.10","status":"affected"},{"version":"6.0.7","status":"affected"},{"version":"6.2.2 and earlier","status":"affected"}]},{"vendor":"Fortinet","product":"FortiVoiceEnterprise","versions":[{"version":"6.0.0","status":"affected"},{"version":"6.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.10","matchCriteriaId":"6A0943A1-AE18-416D-BD0B-C519939E4F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"C5F9DD6A-23C9-44C2-AF8C-409EDB6ECCD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.2","matchCriteriaId":"08C73418-FAB3-477D-85F9-621874FBE8DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.1","matchCriteriaId":"28A42A3E-FBA6-4A68-AD2B-7CFFBDCF1E49"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-045","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-15709","sourceIdentifier":"psirt@fortinet.com","published":"2020-06-01T19:15:09.800","lastModified":"2026-06-17T02:20:55.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin console may allow unauthorized administrators to overwrite system files via specially crafted tcpdump commands in the CLI."},{"lang":"es","value":"Una comprobación de entrada inapropiada en FortiAP-S/W2 versiones 6.2.0 hasta 6.2.2, versiones 6.0.5 y por debajo, FortiAP-U versiones 6.0.1 y por debajo, la consola de administración de la CLI puede permitir a administradores no autorizados sobrescribir los archivos de sistema por medio comandos tcpdump especialmente diseñados en la CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiAP-S/W2, FortiAP-U","versions":[{"version":"FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:C/A:C","baseScore":8.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:17.609971Z","id":"CVE-2019-15709","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiap-s:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5","matchCriteriaId":"20474B39-661E-4425-8007-2C2597382AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiap-s:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.2","matchCriteriaId":"070E514F-CAAA-41B7-A2F3-B1413523AFD9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiap-s:-:*:*:*:*:*:*:*","matchCriteriaId":"08EA632B-0568-4EDB-81E1-E2772389E106"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5","matchCriteriaId":"D117E145-EB84-4BE5-B4F6-6262F8BDE56F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.2","matchCriteriaId":"BC5D6562-A598-42AC-AFD6-4C6DF215479A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:fortinet:fortiap-w2:-:*:*:*:*:*:*:*","matchCriteriaId":"94DC1717-87D3-4BCA-8919-431D30D307D6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"7AD25BC2-1FDE-45EB-8887-6FC680614B84"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiap-u:-:*:*:*:*:*:*:*","matchCriteriaId":"8197EC87-A2AE-4D42-90DD-96A3A7B26E76"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-298","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-9291","sourceIdentifier":"psirt@fortinet.com","published":"2020-06-01T19:15:10.190","lastModified":"2026-06-17T03:27:42.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack."},{"lang":"es","value":"Una Vulnerabilidad de Archivos Temporales No Seguros en FortiClient para Windows versiones 6.2.1 y posteriores, puede permitir a un usuario local alcanzar privilegios elevados por medio del agotamiento del conjunto de nombres de archivos temporales combinado con un ataque de enlace simbólico."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClient for Windows","versions":[{"version":"FortiClient for Windows 6.2.1 and earlier and FortiClient for Windows 6.0.9 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:15.726193Z","id":"CVE-2020-9291","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-668"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndIncluding":"6.0.9","matchCriteriaId":"C3D3CD6A-530D-49F7-85B1-010D01AF8055"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.1","matchCriteriaId":"FDD1980D-3795-46FF-82E7-4D225A245779"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-040","source":"psirt@fortinet.com","tags":["Broken Link"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-040","source":"nvd@nist.gov","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2019-16150","sourceIdentifier":"psirt@fortinet.com","published":"2020-06-04T13:15:10.757","lastModified":"2026-06-17T02:21:46.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use of a hard-coded cryptographic key to encrypt security sensitive data in local storage and configuration in FortiClient for Windows prior to 6.4.0 may allow an attacker with access to the local storage or the configuration backup file to decrypt the sensitive data via knowledge of the hard-coded key."},{"lang":"es","value":"El uso de una clave criptográfica embebida para cifrar datos confidenciales de seguridad en el almacenamiento local y la configuración en FortiClient para Windows versiones anteriores a 6.4.0, puede permitir a un atacante con acceso al almacenamiento local o al archivo de copia de seguridad de la configuración descifrar los datos confidenciales mediante el conocimiento de la clave embebida"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiClient for Windows","versions":[{"version":"FortiClient for Windows below 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:14.279703Z","id":"CVE-2019-16150","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionEndExcluding":"6.4.0","matchCriteriaId":"E7CA6F69-4F2A-4303-8CE9-5CE7FB07DEE9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-194","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-6640","sourceIdentifier":"psirt@fortinet.com","published":"2020-06-04T13:15:11.163","lastModified":"2026-06-17T03:23:42.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Description Area."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada en el Admin Profile de FortiAnalyzer puede permitir a un atacante autenticado remoto llevar a cabo un ataque de tipo cross site scripting (XSS) almacenado mediante el Área Description"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiAnalyzer","versions":[{"version":"FortiAnalyzer 6.2.3, 6.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:12.622027Z","id":"CVE-2020-6640","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.4","matchCriteriaId":"1D6B9FDD-BA90-4DA4-A171-F5851E35357E"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-003","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-9292","sourceIdentifier":"psirt@fortinet.com","published":"2020-06-04T13:15:11.367","lastModified":"2026-06-17T03:27:42.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated privileges via the AoWinAgt executable service path."},{"lang":"es","value":"Una vulnerabilidad de la ruta de servicio sin comillas en el componente FortiSIEM Windows Agent puede permitir a un atacante alcanzar privilegios elevados por medio de la ruta de servicio del ejecutable AoWinAgt"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiSIEMWindowsAgent","versions":[{"version":"FortiSIEMWindowsAgent 3.1.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:10:57.657321Z","id":"CVE-2020-9292","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-428"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem_windows_agent:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.2","matchCriteriaId":"B60709A5-29E1-4C6D-990B-D65C736D1F7B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-021","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-17655","sourceIdentifier":"psirt@fortinet.com","published":"2020-06-16T21:15:10.313","lastModified":"2026-06-17T02:24:21.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.0 through 6.2.2, 6.0.9 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier may allow an attacker to retrieve a logged-in SSL VPN user's credentials should that attacker be able to read the session file stored on the targeted device's system."},{"lang":"es","value":"Una vulnerabilidad de almacenamiento de texto claro en un archivo o en el disco (CWE-313) en FortiOS SSL VPN versión 6.2.0 hasta la versión 6.2.2, versión 6.0.9 y anteriores y FortiProxy versión 2.0.0, versión 1.2.9 y anteriores puede permitir que un atacante recupere las credenciales de un usuario de SSL VPN que haya iniciado sesión en caso de que dicho atacante pueda leer el archivo de sesión almacenado en el sistema del dispositivo objetivo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS and FortiProxy","versions":[{"version":"FortiOS 6.2.0 through 6.2.2, 6.0.9 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:47.722910Z","id":"CVE-2019-17655","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.3","matchCriteriaId":"BB277B3D-5973-445E-B688-4E1911D00FFE"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-217","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-224","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/psirt/FG-IR-19-217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2020-9289","sourceIdentifier":"psirt@fortinet.com","published":"2020-06-16T21:15:11.470","lastModified":"2026-06-17T03:27:42.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiManager 6.2.3 and below, FortiAnalyzer 6.2.3 and below may allow an attacker with access to the CLI configuration or the CLI backup file to decrypt the sensitive data, via knowledge of the hard-coded key."},{"lang":"es","value":"Un uso de una clave criptográfica embebida para cifrar datos de contraseña en la configuración de la CLI en FortiManager versiones 6.2.3 y posteriores, FortiAnalyzer versiones 6.2.3 y posteriores puede permitir a un atacante con acceso a la configuración de la CLI o al archivo de copia de seguridad de la CLI descifrar los datos confidenciales, por medio del conocimiento de la clave embebida"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiManager","versions":[{"version":"FortiManager 6.2.3 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:48.822151Z","id":"CVE-2020-9289","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.3","matchCriteriaId":"A7C8292F-C105-450E-B406-DAF6193081FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.3","matchCriteriaId":"6F684A12-89F4-4D63-95C2-6C46A469E10F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-007","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-6644","sourceIdentifier":"psirt@fortinet.com","published":"2020-06-22T16:15:12.057","lastModified":"2026-06-17T03:23:43.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID via other, hypothetical attacks."},{"lang":"es","value":"Una vulnerabilidad de expiración de sesión insuficiente en FortiDeceptor versiones 3.0.0 y posteriores, permite a un atacante reutilizar los ID de sesión de usuario administrador no vencidos para obtener privilegios de administrador, en caso de que el atacante sea capaz de obtener ese ID de sesión por medio de otros ataques hipotéticos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiDeceptor","versions":[{"version":"3.0.0 and below","status":"affected"},{"version":"Fixed in 3.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:36.533873Z","id":"CVE-2020-6644","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.0","matchCriteriaId":"38626EDB-2E43-43BE-923E-2601C4A6C098"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-006","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-9288","sourceIdentifier":"psirt@fortinet.com","published":"2020-06-22T16:15:12.120","lastModified":"2026-06-17T03:27:42.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS profile or the Radius Profile."},{"lang":"es","value":"Una  vulnerabilidad de neutralización inapropiada de la entrada en FortiWLC versión 8.5.1, permite a un atacante autenticado remoto realizar un ataque de tipo cross site scripting (XSS) almacenado por medio del perfil ESS o el perfil Radius"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLC","versions":[{"version":"FortiWLC 8.5.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:11.194658Z","id":"CVE-2020-9288","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionEndIncluding":"8.5.1","matchCriteriaId":"6F3131A6-8236-4640-A21F-BF5DC6A8A733"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-016","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-12812","sourceIdentifier":"psirt@fortinet.com","published":"2020-07-24T23:15:12.003","lastModified":"2026-10-02T14:54:53.040","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second factor of authentication (FortiToken) if they changed the case of their username."},{"lang":"es","value":"Una vulnerabilidad de autenticación inapropiada en SSL VPN en FortiOS versiones 6.4.0, 6.2.0 a 6.2.3, 6.0.9 y posteriores, puede resultar en que un usuario sea capaz de iniciar sesión con éxito sin que sea requerido el segundo factor de autenticación (FortiToken) si cambiaron el caso de su nombre de usuario"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T03:55:19.062068Z","id":"CVE-2020-12812","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2022-05-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"},{"lang":"en","value":"CWE-287"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.10","matchCriteriaId":"756167D1-ED53-4EC7-88B3-D82E329A2FA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.4","matchCriteriaId":"BD0966DA-A4B1-4C78-862C-3CB9557DCC4C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6E45EB-4C8C-4777-9200-08B14595A3A7"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-283","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-12812","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2019-5591","sourceIdentifier":"psirt@fortinet.com","published":"2020-08-14T16:15:16.070","lastModified":"2026-08-15T04:17:41.413","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server."},{"lang":"es","value":"Una vulnerabilidad de Configuración Predeterminada en FortiOS puede permitir a un atacante no autenticado en la misma subred interceptar información confidencial al hacerse pasar por el servidor LDAP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.2.0 and below.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2021-04-22T00:00:00+00:00","id":"CVE-2019-5591","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2022-05-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet FortiOS Default Configuration Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.0","matchCriteriaId":"1023D06F-42D8-40DA-BEE0-A71397F58202"}]}]}],"references":[{"url":"https://www.fortiguard.com/psirt/FG-IR-19-037","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-19-037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-5591","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2020-12816","sourceIdentifier":"psirt@fortinet.com","published":"2020-09-24T15:15:13.093","lastModified":"2026-06-17T02:52:21.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the UserID of Admin Users."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada en FortiNAC versiones anteriores a 8.7.2, puede permitir a un atacante autenticado remoto llevar a cabo un ataque de tipo cross site scripting (XSS) almacenado por medio de un UserID de Usuarios Administradores."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiNAC","versions":[{"version":"FortiNAC before 8.7.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:09.742141Z","id":"CVE-2020-12816","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionEndExcluding":"8.7.3","matchCriteriaId":"02B5F3A1-F44D-4A42-A1BF-3FCC42D55839"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-002","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-002","source":"nvd@nist.gov","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-12817","sourceIdentifier":"psirt@fortinet.com","published":"2020-09-24T15:15:13.173","lastModified":"2026-06-17T02:52:22.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Connectors."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada en FortiAnalyzer versiones anteriores a 6.4.1 y 6.2.5, puede permitir a un atacante autenticado remoto inyectar etiquetas HTML relacionadas con script por medio del parámetro Name de Conectores de Almacenamiento."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAnalyzer","versions":[{"version":"FortiAnalyzer before 6.4.1; before 6.2.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:35.252097Z","id":"CVE-2020-12817","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"33BBFA56-466B-471F-AA74-0D8339CD2D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DA60D965-6F24-47E6-A62C-C147D51502A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F00DF5B2-FA3D-478B-834D-9A64194215CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.0","matchCriteriaId":"888CBB49-6E71-496E-AC1E-02A55F8E796A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"83A5237C-C126-4AEA-8CE8-DEC82DDEC69D"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-054","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-12818","sourceIdentifier":"psirt@fortinet.com","published":"2020-09-24T15:15:13.237","lastModified":"2026-06-17T02:52:22.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP addresses to go unnoticed."},{"lang":"es","value":"Una vulnerabilidad de registro insuficiente en FortiGate versiones anteriores a 6.4.1, puede permitir que el tráfico de un atacante no autenticado hacia direcciones IP propiedad de Fortinet pase desapercibido."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS before 6.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:42.429984Z","id":"CVE-2020-12818","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4.1","matchCriteriaId":"366223BF-F61D-4AC7-A884-D6FB48CD47A7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_1000d:-:*:*:*:*:*:*:*","matchCriteriaId":"64F7589C-F20B-4222-B859-78D15C457CE5"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_100e:-:*:*:*:*:*:*:*","matchCriteriaId":"5E4BAC86-6E1C-4ECE-8E41-789A6A617A40"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_100f:-:*:*:*:*:*:*:*","matchCriteriaId":"561D84F5-E3D4-4293-AC13-26D2E217D970"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_1100e:-:*:*:*:*:*:*:*","matchCriteriaId":"648723EC-E144-4975-8D23-A4BB5EF6F07A"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_1500d:-:*:*:*:*:*:*:*","matchCriteriaId":"D8C8DA5D-9CB6-4BA6-BB8B-F41501726AF9"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_1800f:-:*:*:*:*:*:*:*","matchCriteriaId":"76792D6F-B647-43A8-8A60-17BE35824BF7"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_2000e:-:*:*:*:*:*:*:*","matchCriteriaId":"92C3D2D8-A79C-4D10-B72E-D71EA3EB06F4"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_200e:-:*:*:*:*:*:*:*","matchCriteriaId":"F3D08C3F-51A4-44CF-BB85-A00536FAADAE"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_2200e:-:*:*:*:*:*:*:*","matchCriteriaId":"0B2A9D43-348B-45DB-94F7-825B29141F09"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_3000d:-:*:*:*:*:*:*:*","matchCriteriaId":"C79E67E1-8A10-4AD3-A6F5-9E82890216B3"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_3300e:-:*:*:*:*:*:*:*","matchCriteriaId":"0CCCA9CD-2B75-46AF-989C-C300CB53358E"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_3400e:-:*:*:*:*:*:*:*","matchCriteriaId":"CD1CDB68-B412-45E2-9AC4-F2A6E5300AA4"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_3600e:-:*:*:*:*:*:*:*","matchCriteriaId":"5015D2E8-8482-467A-96F4-65CBF0AFAC6E"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_3700d:-:*:*:*:*:*:*:*","matchCriteriaId":"431E4C52-4BBF-48BA-867B-32D1405A5863"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_3960e:-:*:*:*:*:*:*:*","matchCriteriaId":"A3E816AC-57B5-4460-AF88-300EB72B5A8A"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_3980e:-:*:*:*:*:*:*:*","matchCriteriaId":"BF54E933-526F-4E65-A6B1-455389525F27"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_400e:-:*:*:*:*:*:*:*","matchCriteriaId":"A197765B-E9B4-4E5A-918D-C0C4B679CBA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_40f:-:*:*:*:*:*:*:*","matchCriteriaId":"96C31DB1-CEBD-4796-9CF1-5D9D000A5A9A"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_4200f:-:*:*:*:*:*:*:*","matchCriteriaId":"326DF840-7BEE-44D3-A8B8-DCE1A673A2C2"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_5001d:-:*:*:*:*:*:*:*","matchCriteriaId":"B35A82B1-ABA8-493D-9E89-E253CDD10472"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_5001e:-:*:*:*:*:*:*:*","matchCriteriaId":"922E4449-EB12-444E-9E8C-C67FA537F1BD"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_5001e1:-:*:*:*:*:*:*:*","matchCriteriaId":"302638DB-0FA0-4804-9FC8-CCD20430B08F"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_5053b:-:*:*:*:*:*:*:*","matchCriteriaId":"F5B0C1E0-CA41-4A31-A42D-FB25090EC6CB"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_5060:-:*:*:*:*:*:*:*","matchCriteriaId":"2A78FF2E-986E-439E-A787-0A14E7EE78CC"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_50e:-:*:*:*:*:*:*:*","matchCriteriaId":"AB3BE8B3-F83D-4C89-AA5C-9B6819128138"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_5144c:-:*:*:*:*:*:*:*","matchCriteriaId":"20B656F3-C696-48A9-9E1C-6F628E246F48"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_600e:-:*:*:*:*:*:*:*","matchCriteriaId":"360F94B1-BFBC-455A-84D4-2E5F90DC0E61"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_60e:-:*:*:*:*:*:*:*","matchCriteriaId":"33F4AB8A-21B9-4969-92B3-250BF7414175"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_60f:-:*:*:*:*:*:*:*","matchCriteriaId":"2D32F0C5-2949-48B6-B9DD-F070DE11C803"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_6300f:-:*:*:*:*:*:*:*","matchCriteriaId":"8C87112F-4971-4A57-98E6-8057A758F7E7"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_6500f:-:*:*:*:*:*:*:*","matchCriteriaId":"4EA7B3B0-C101-406D-AAF4-C7CF86075EA6"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_7040e:-:*:*:*:*:*:*:*","matchCriteriaId":"68E575C9-D2C9-476B-91BB-D49C6FB62351"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_7060e:-:*:*:*:*:*:*:*","matchCriteriaId":"1786CFE3-300C-4891-A55F-06BB0D0B67D7"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_80e:-:*:*:*:*:*:*:*","matchCriteriaId":"68866893-6942-4FF6-88E8-4BEB610AD6FE"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_80f:-:*:*:*:*:*:*:*","matchCriteriaId":"906455AD-D91C-47D6-A244-33B43ECB0A74"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-033","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-033","source":"nvd@nist.gov","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-12811","sourceIdentifier":"psirt@fortinet.com","published":"2020-09-24T18:15:16.887","lastModified":"2026-10-13T18:17:10.733","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet  may allow attacker to execute unauthorized code or commands via network exploitable"},{"lang":"es","value":"Una neutralización incorrecta de las etiquetas HTML relacionadas con script en una página web en FortiManager versiones 6.2.0, 6.2.1, 6.2.2 y 6.2.3 y FortiAnalyzer versiones 6.2.0, 6.2.1, 6.2.2 y 6.2.3, puede permitir a un atacante ejecutar un cross site scripting (XSS) por medio del campo de nombre Identify Provider."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.5","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.7","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:07.086026Z","id":"CVE-2020-12811","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-80"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"ACD29FA6-57DD-4440-A724-AB67DAD77B1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"D450DA33-AFA1-45A7-AEE8-0D3399702DBE"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-20-005","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/advisory/FG-IR-20-005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-12815","sourceIdentifier":"psirt@fortinet.com","published":"2020-09-24T18:15:16.963","lastModified":"2026-06-17T02:52:21.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada en FortiTester versiones anteriores a 3.9.0, puede permitir a un atacante autenticado remoto inyectar etiquetas HTML relacionadas con el script mediante campos de dirección IPv4/IPv6."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiTester","versions":[{"version":"FortiTester before 3.9.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:08.415847Z","id":"CVE-2020-12815","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.5","matchCriteriaId":"BA74C62F-DE6E-4BDE-AB69-DD10A70AE5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.1","matchCriteriaId":"06765221-336D-4F14-ACB2-DEAD02A8588B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.0","matchCriteriaId":"888CBB49-6E71-496E-AC1E-02A55F8E796A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"83A5237C-C126-4AEA-8CE8-DEC82DDEC69D"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-054","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-6648","sourceIdentifier":"psirt@fortinet.com","published":"2020-10-21T14:15:20.387","lastModified":"2026-06-17T03:23:43.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier may allow an authenticated attacker to obtain sensitive information such as users passwords by connecting to FortiGate CLI and executing the \"diag sys ha checksum show\" command."},{"lang":"es","value":"Un vulnerabilidad almacenamiento de información confidencial en texto sin cifrar en la interfaz de línea de comandos de FortiOS en las versiones 6.2.4 y anteriores y FortiProxy en las versiones versiones 2.0.0, 1.2.9 y anteriores, puede permitir a un atacante autenticado obtener información confidencial como las contraseñas de los usuarios al conectarse a la CLI de FortiGate y ejecutar el comando \"diag sys ha checksum show\""}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiGate and FortiProxy","versions":[{"version":"FortiOS versions 6.2.4 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:40.110577Z","id":"CVE-2020-6648","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.10","matchCriteriaId":"D87AB8E6-5D58-4C4D-A465-29E756B0AA82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.12","matchCriteriaId":"DCF2FC57-1A6E-422B-9EB5-5A9EF683BDAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.5","matchCriteriaId":"B59A39D6-9494-4273-8348-1078A77DD796"}]}]}],"references":[{"url":"https://www.fortiguard.com/psirt/FG-IR-20-009","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-236","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-29015","sourceIdentifier":"psirt@fortinet.com","published":"2021-01-14T16:15:17.883","lastModified":"2026-06-17T03:10:58.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A blind SQL injection in the user interface of FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to execute arbitrary SQL queries or commands by sending a request with a crafted Authorization header containing a malicious SQL statement."},{"lang":"es","value":"Una inyección SQL ciega en la interfaz de usuario de FortiWeb versiones 6.3.0 hasta 6.3.7 y versiones anteriores a 6.2.4, puede permitir a un atacante no autenticado remoto ejecutar consultas o comandos SQL arbitrarios mediante el envío de una petición con un encabezado Authorization diseñado que contiene una sentencia SQL malicioso"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:10:54.692405Z","id":"CVE-2020-29015","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.4","matchCriteriaId":"7D137C0B-9DD8-40C4-B121-3971B4A65D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.7","matchCriteriaId":"1007BA52-D565-4ACC-A6D5-EC559316A679"}]}]}],"references":[{"url":"https://www.fortiguard.com/psirt/FG-IR-20-124","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-29016","sourceIdentifier":"psirt@fortinet.com","published":"2021-01-14T16:15:18.023","lastModified":"2026-06-17T03:10:59.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to overwrite the content of the stack and potentially execute arbitrary code by sending a crafted request with a large certname."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en FortiWeb versiones 6.3.0 hasta 6.3.5 y versiones anteriores a 6.2.4, puede permitir a un atacante no autenticado remoto sobrescribir el contenido de la pila y potencialmente ejecutar código arbitrario mediante el envío de una petición diseñada con un nombre de certificado largo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:10:56.422150Z","id":"CVE-2020-29016","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.4","matchCriteriaId":"7D137C0B-9DD8-40C4-B121-3971B4A65D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.5","matchCriteriaId":"866AC2A0-D1F6-4C7C-A9AE-94AB1DAB2C26"}]}]}],"references":[{"url":"https://www.fortiguard.com/psirt/FG-IR-20-125","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-29017","sourceIdentifier":"psirt@fortinet.com","published":"2021-01-14T16:15:18.070","lastModified":"2026-06-17T03:10:59.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to execute arbitrary commands on the system by exploiting a command injection vulnerability on the Customization page."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos del Sistema Operativo en FortiDeceptor versiones 3.1.0, 3.0.1, 3.0.0, puede permitir a un atacante autenticado remoto ejecutar comandos arbitrarios en el sistema al explotar una vulnerabilidad de inyección de comandos en la página Customization"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiDeceptor","versions":[{"version":"FortiDeceptor 3.1.0, 3.0.1, 3.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:33.948807Z","id":"CVE-2020-29017","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"17717C27-57A3-4128-AEAA-E9A1A363599E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CDE09A1A-0F21-4BE1-913F-A4794FE34B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"67A22BDE-857F-4A92-A027-38C4A6D6144D"}]}]}],"references":[{"url":"https://www.fortiguard.com/psirt/FG-IR-20-177","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-29018","sourceIdentifier":"psirt@fortinet.com","published":"2021-01-14T16:15:18.117","lastModified":"2026-06-17T03:10:59.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive data via the redir parameter."},{"lang":"es","value":"Una vulnerabilidad de cadena de formato en FortiWeb versiones 6.3.0 hasta 6.3.5, puede permitir a un atacante remoto autenticado leer el contenido de la memoria y recuperar datos confidenciales por medio del parámetro redir"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.3.0 through 6.3.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:03:32.662637Z","id":"CVE-2020-29018","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.5","matchCriteriaId":"866AC2A0-D1F6-4C7C-A9AE-94AB1DAB2C26"}]}]}],"references":[{"url":"https://www.fortiguard.com/psirt/FG-IR-20-123","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-29019","sourceIdentifier":"psirt@fortinet.com","published":"2021-01-14T16:15:18.180","lastModified":"2026-06-17T03:10:59.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow a remote, unauthenticated attacker to crash the httpd daemon thread by sending a request with a crafted cookie header."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en FortiWeb versiones 6.3.0 hasta 6.3.7 y versiones anteriores a 6.2.4, puede permitir a un atacante no autenticado remoto bloquear el subproceso del demonio httpd mediante el envío de una petición con un encabezado cookie diseñado"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:09:38.732715Z","id":"CVE-2020-29019","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.4","matchCriteriaId":"7D137C0B-9DD8-40C4-B121-3971B4A65D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.7","matchCriteriaId":"1007BA52-D565-4ACC-A6D5-EC559316A679"}]}]}],"references":[{"url":"https://www.fortiguard.com/psirt/FG-IR-20-126","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-6649","sourceIdentifier":"psirt@fortinet.com","published":"2021-02-08T16:15:11.907","lastModified":"2026-06-17T03:23:43.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)"},{"lang":"es","value":"Una vulnerabilidad de expiración de sesión insuficiente en FortiIsolator de  FortiNet versiones 2.0.1 y anteriores, puede permitir a un atacante reutilizar las ID de sesión de usuario de administrador no vencidas para alcanzar privilegios de administrador, en caso de que el atacante pueda obtener esa ID de sesión (por medio de otros ataques hipotéticos)"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiIsolator","versions":[{"version":"FortiIsolator 2.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T20:10:53.026105Z","id":"CVE-2020-6649","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.1","matchCriteriaId":"690ABAAF-591C-4D27-8679-664AB3C034D0"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-011","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22122","sourceIdentifier":"psirt@fortinet.com","published":"2021-02-08T16:15:12.080","lastModified":"2026-06-17T03:36:39.267","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload in different vulnerable API end-points."},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de la página web en la interfaz GUI de FortiWeb versiones 6.3.0 hasta 6.3.7 y la versiones anteriores a 6.2.4, puede permitir a un atacante remoto no autenticado llevar a cabo un ataque de tipo cross site scripting (XSS) reflejado al inyectar una carga útil maliciosa en diferentes endpoints de  la API vulnerable"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.3.0 through 6.3.7 and  version before 6.2.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:05.682333Z","id":"CVE-2021-22122","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.3","matchCriteriaId":"536B766C-A599-460F-811D-911D8B929BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.7","matchCriteriaId":"1007BA52-D565-4ACC-A6D5-EC559316A679"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-122","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-15937","sourceIdentifier":"psirt@fortinet.com","published":"2021-03-03T16:15:12.213","lastModified":"2026-06-17T02:57:26.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow a remote attacker to perform a stored cross site scripting attack (XSS) via the IPS and WAF logs dashboard."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada en FortiGate versiones 6.2.x por debajo de 6.2.5 y versiones 6.4.x por debajo de 6.4.1, puede permitir a un atacante remoto llevar a cabo un ataque de tipo cross site scripting (XSS) almacenado por medio del panel de registros de IPS y WAF"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.4.1, 6.2.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:04.326001Z","id":"CVE-2020-15937","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.5","matchCriteriaId":"B59A39D6-9494-4273-8348-1078A77DD796"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.1","matchCriteriaId":"E01B9A4C-DBDC-483F-A2BB-6ADD90A5E9B4"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-068","source":"psirt@fortinet.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-15938","sourceIdentifier":"psirt@fortinet.com","published":"2021-03-04T18:15:12.863","lastModified":"2026-06-17T02:57:26.367","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"When traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below 6.2.5 and below 6.4.2 on port 80/443, it is not redirected to the transparent proxy policy for processing, as it doesn't have a valid HTTP header."},{"lang":"es","value":"Cuando el tráfico que no es HTTP/S (por ejemplo: tráfico SSH, etc.) atraviesa el FortiGate en versiones inferiores a 6.2.5 y por debajo de 6.4.2 en el puerto 80/443, no se redirecciona hacia la política de proxy transparente para su procesamiento, ya que no presenta un encabezado HTTP válido"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.4.2, 6.2.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:59.803845Z","id":"CVE-2020-15938","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.5","matchCriteriaId":"3D02C781-85DB-4474-A90B-042398B080D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"1CBBBF98-0E21-4C0B-BE40-040CF6F81C9C"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-172","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22128","sourceIdentifier":"psirt@fortinet.com","published":"2021-03-04T18:15:13.130","lastModified":"2026-06-17T03:36:39.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado en el portal FortiProxy SSL VPN versiones 2.0.0, 1.2.9 y anteriores, puede permitir a un atacante remoto autenticado acceder a servicios internos como ZebOS Shell en el dispositivo FortiProxy por medio de la funcionalidad Quick Connection"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiProxy","versions":[{"version":"FortiProxy 2.0.0, 1.2.9 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:02.669973Z","id":"CVE-2021-22128","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.9","matchCriteriaId":"204BD02A-F191-4760-8541-8C95E161C364"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-235","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-17656","sourceIdentifier":"psirt@fortinet.com","published":"2021-04-12T15:15:13.827","lastModified":"2026-06-17T02:24:21.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2.2 and below and FortiProxy 1.0.x, 1.1.x, 1.2.9 and below, 2.0.0 and below may allow an authenticated remote attacker to crash the service by sending a malformed PUT request to the server. Fortinet is not aware of any successful exploitation of this vulnerability that would lead to code execution."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en el demonio HTTPD de FortiOS versiones 6.0.10 y por debajo, versiones 6.2.2 y por debajo y FortiProxy versiones 1.0.x, 1.1.x, 1.2.9 y por debajo, versiones 2.0.0 y por debajo, puede permitir a un atacante remoto autenticado bloquear el servicio mediante el envío de una petición PUT malformada hacia el servidor.&#xa0;Fortinet no tiene conocimiento de ninguna explotación con éxito de esta vulnerabilidad que podría conllevar a una ejecución de código"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiProxy, FortiOS","versions":[{"version":"FortiProxy 1.0.x, 1.1.x, 1.2.9 and below, 2.0.0 and below; FortiOS 6.0.10 and below,  6.2.2 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:54.865929Z","id":"CVE-2019-17656","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.2.10","matchCriteriaId":"388FF005-6EE2-47C4-A782-BC1911BB83A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.2","matchCriteriaId":"B87B5F67-4417-4BD6-9A58-4FA5188A659C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.10","matchCriteriaId":"9BE1BA74-CBC4-4661-91E5-68E8425D42EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.2","matchCriteriaId":"159A3E80-81C4-4D83-9735-40F8B80A87F1"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-248","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-007","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-15942","sourceIdentifier":"psirt@fortinet.com","published":"2021-04-12T15:15:14.000","lastModified":"2026-06-17T02:57:27.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may allow a remote authenticated attacker to read the password used by the FortiWeb scanner to access the device defined in the scan profile."},{"lang":"es","value":"Una vulnerabilidad de divulgación de información en el perfil Web Vulnerability Scan de FortiWeb versiones 6.2.x por debajo de  6.2.4 de Fortinet y versiones 6.3.x por debajo de 6.3.5, puede permitir a un atacante autenticado remoto leer la contraseña utilizada por el escáner de FortiWeb para acceder al dispositivo definido en el perfil de escaneo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.3.4, 6.2.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:57.964646Z","id":"CVE-2020-15942","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.3","matchCriteriaId":"9F6DFE2E-B88E-445F-8248-382880E7AC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.4","matchCriteriaId":"2E6CCBBB-B55D-4B0A-B143-991431B4ED6F"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-076","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-076","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-20-076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24024","sourceIdentifier":"psirt@fortinet.com","published":"2021-04-12T15:15:14.890","lastModified":"2026-06-17T03:39:10.777","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files."},{"lang":"es","value":"Una vulnerabilidad de almacenamiento de texto sin cifrar de información confidencial en el archivo de registro en FortiADCManager versiones 5.3.0 y por debajo, versiones 5.2.1 y por debajo y FortiADC versiones 5.3.7 y por debajo puede permitir a un atacante autenticado remoto leer la contraseña de otros usuarios locales en los archivos de registro"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiADCManager, FortiADC","versions":[{"version":"FortiADCManager 5.3.0 and below,  5.2.1 and below; FortiADC 5.3.7 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:56.214161Z","id":"CVE-2021-24024","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.7","matchCriteriaId":"469D4C5C-6A16-42DB-987F-FE486FC26E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.0","matchCriteriaId":"44B24E17-E953-4FF1-8DB9-AA9266DA5047"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-244","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24011","sourceIdentifier":"psirt@fortinet.com","published":"2021-05-10T12:15:07.640","lastModified":"2026-06-17T03:39:09.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to escalate the privileges to root by abusing the sudo privileges."},{"lang":"es","value":"Una vulnerabilidad de escalada de privilegios en FortiNAC versiones por debajo de 8.8.2, puede permitir a un usuario administrador escalar privilegios a root al abusar de los privilegios de sudo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiNAC","versions":[{"version":"FortiNAC 8.8.1 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:53.523155Z","id":"CVE-2021-24011","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionEndExcluding":"8.8.2","matchCriteriaId":"05288FD9-1010-4A31-A79D-9314F2AC56E5"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-038","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22123","sourceIdentifier":"psirt@fortinet.com","published":"2021-06-01T20:15:08.297","lastModified":"2026-06-17T03:36:39.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x, 5.9.x may allow a remote authenticated attacker to execute arbitrary commands on the system via the SAML server configuration page."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos del Sistema Operativo en la interfaz de administración de FortiWeb versiones 6.3.7 y por debajo, versiones 6.2.3 y por debajo, versiones 6.1.x, 6.0.x, 5.9.x, puede permitir a un atacante remoto autenticado ejecutar comandos arbitrarios en el sistema por medio de la página de configuración del servidor SAML"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x, 5.9.x","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","baseScore":7.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:50.497025Z","id":"CVE-2021-22123","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.9.0","versionEndExcluding":"6.2.4","matchCriteriaId":"06335D6C-69B0-4255-981E-C2068B4CC614"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.8","matchCriteriaId":"3AC2336F-2394-4E31-BEE8-99A5D0DB9F43"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-120","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26111","sourceIdentifier":"psirt@fortinet.com","published":"2021-06-01T20:15:08.413","lastModified":"2026-06-17T03:42:52.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device."},{"lang":"es","value":"Una vulnerabilidad de falta de liberación de memoria después del tiempo de vida efectivo en FortiSwitch versiones 6.4.0 hasta 6.4.6, versiones 6.2.0 hasta 6.2.6, versiones 6.0.0 hasta 6.0.6, versiones 3.6.11 y anteriores, puede permitir a un atacante en una red adyacente agotar la memoria disponible mediante el envío de paquetes LLDP/CDP/EDP específicamente diseñados al dispositivo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSwitch","versions":[{"version":"FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:N/I:N/A:P","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:52.027136Z","id":"CVE-2021-26111","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.11","matchCriteriaId":"FB555E71-2F04-4C88-9B13-026A6510618C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"3AC81534-CBEC-41A3-B80A-466F74EA8BC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"DDE660F5-928F-4E7A-870C-9D90AF60EE23"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"3CF8ED75-2ACA-4329-A025-DB4524ACF4DB"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-026","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-6641","sourceIdentifier":"psirt@fortinet.com","published":"2021-06-02T11:15:07.957","lastModified":"2026-06-17T03:23:42.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters."},{"lang":"es","value":"Dos vulnerabilidades de omisión de autorización mediante claves controladas por el usuario en la interfaz de administración de Fortinet FortiPresence versión 2.1.0, pueden permitir a un atacante conseguir acceso a algunos datos de usuarios por medio de los parámetros portal manager o portal users"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPresence","versions":[{"version":"FortiPresence 2.1.0 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:48.941475Z","id":"CVE-2020-6641","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortipresence:*:*:*:*:*:*:*:*","versionEndExcluding":"20.1","matchCriteriaId":"D177B7AE-3AC7-4948-90E6-48B25F9955C0"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-258","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24012","sourceIdentifier":"psirt@fortinet.com","published":"2021-06-02T13:15:12.673","lastModified":"2026-06-17T03:39:09.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is signed by a trusted Certificate Authority."},{"lang":"es","value":"Una vulnerabilidad de seguimiento impropio de la cadena de confianza de un certificado FortiGate versiones 6.4.0 hasta 6.4.4, puede permitir a un usuario de LDAP conectarse a SSLVPN con cualquier certificado que esté firmado por una Autoridad de Certificación confiable"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.4.0 to 6.4.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:47.552875Z","id":"CVE-2021-24012","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.5","matchCriteriaId":"26712170-76E1-4896-9421-6CB9160D5DDF"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-018","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22130","sourceIdentifier":"psirt@fortinet.com","published":"2021-06-03T11:15:08.527","lastModified":"2026-06-17T03:36:40.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 may allow an authenticated, remote attacker to perform a Denial of Service attack by running the `diagnose sys cpuset` with a large cpuset mask value. Fortinet is not aware of any successful exploitation of this vulnerability that would lead to code execution."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en el FortiProxy physical appliance versiones 2.0.0 hasta 2.0.1, versiones 1.2.0 hasta 1.2.9, versiones 1.1.0 hasta 1.1.6, versiones 1.0.0 a 1.0.7, puede permitir a un atacante remoto autenticado llevar a cabo un ataque de Denegación de Servicio ejecutando \"diagnose sys cpuset\" con un valor de máscara de cpuset grande. Fortinet no tiene conocimiento de ninguna explotación con éxito de esta vulnerabilidad que conlleve a una ejecución de código"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiProxy","versions":[{"version":"FortiProxy 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:48.067371Z","id":"CVE-2021-22130","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.10","matchCriteriaId":"8D74F6EC-871A-4E6B-B123-723BB42B4386"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.2","matchCriteriaId":"B87B5F67-4417-4BD6-9A58-4FA5188A659C"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-006","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24023","sourceIdentifier":"psirt@fortinet.com","published":"2021-06-03T15:15:07.633","lastModified":"2026-06-17T03:39:10.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payload in the \"diagnose\" command."},{"lang":"es","value":"Una comprobación de entrada inapropiada en FortiAI versión v1.4.0 y anteriores puede permitir a un usuario autenticado conseguir acceso al shell del sistema por medio de una carga útil maliciosa en el comando \"diagnose\""}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAI","versions":[{"version":"FortiAI 1.4.0 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:46.765477Z","id":"CVE-2021-24023","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiai_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0","matchCriteriaId":"2ABCF7D4-85F6-4BA1-9DDB-C5F068877730"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiai_3500f:-:*:*:*:*:*:*:*","matchCriteriaId":"4C8E5455-5A75-4758-83D5-4ED5CB4E3793"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-033","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24005","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-06T11:15:08.560","lastModified":"2026-06-17T03:39:08.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key."},{"lang":"es","value":"El uso de claves criptográficas embebidas para cifrar los archivos de configuración y los registros de depuración en FortiAuthenticator versiones anteriores a 6.3.0, puede permitir a un atacante con acceso a los archivos o a la configuración de la CLI descifrar los datos confidenciales, por medio del conocimiento de la clave embebida"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","versions":[{"version":"FortiAuthenticator versions before 6.3.0.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:46.040400Z","id":"CVE-2021-24005","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.3.0","matchCriteriaId":"BD81253F-E6AB-401C-83A4-5EEC9209E95F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-049","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-29014","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-09T19:15:08.000","lastModified":"2026-06-17T03:10:58.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3.2.2 may allow an authenticated attacker to bring the system into an unresponsive state via specifically orchestrated sequences of commands."},{"lang":"es","value":"Una ejecución concurrente usando recursos compartidos con una sincronización inapropiada (\"race condition\") en el shell de comandos de FortiSandbox versiones anteriores a 3.2.2, puede permitir a un atacante autenticado llevar el sistema a un estado de falta de respuesta por medio de secuencias de comandos específicamente orquestadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox before 3.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:C","baseScore":6.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:42.899541Z","id":"CVE-2020-29014","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.2","matchCriteriaId":"D0E0C75A-847D-44A5-BF9A-FCBA41ED8F3C"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-185","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22129","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-09T19:15:08.073","lastModified":"2026-06-17T03:36:40.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Múltiples instancias de cálculo incorrecto del tamaño del búfer en la interfaz Administrativa y de Correo web de FortiMail versiones anteriores a 6.4.5, pueden permitir a un atacante autenticado con acceso regular al correo web desencadenar un desbordamiento del búfer y posiblemente ejecutar código o comandos no autorizados por medio de peticiones HTTP específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail before 6.4.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:44.292006Z","id":"CVE-2021-22129","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.12","matchCriteriaId":"012B958E-B46C-4E94-91FA-6E0083739215"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.1","versionEndExcluding":"6.0.11","matchCriteriaId":"624D363B-FC7C-482A-8F45-0F7C75E07463"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.7","matchCriteriaId":"FA33C194-BB9C-43C8-864C-15396010FAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.5","matchCriteriaId":"5DAB4EFB-D73F-4FC5-8FE7-278BADB9F78E"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-023","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24007","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-09T19:15:08.133","lastModified":"2026-06-17T03:39:08.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Múltiples vulnerabilidades de neutralización inapropiada de elementos especiales de comandos SQL en FortiMail versiones anteriores a 6.4.4, pueden permitir a un atacante no autenticado ejecutar código o comandos no autorizados por medio de peticiones HTTP específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail before 6.4.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:20.385111Z","id":"CVE-2021-24007","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.12","matchCriteriaId":"012B958E-B46C-4E94-91FA-6E0083739215"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.1","versionEndExcluding":"6.0.11","matchCriteriaId":"624D363B-FC7C-482A-8F45-0F7C75E07463"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.7","matchCriteriaId":"FA33C194-BB9C-43C8-864C-15396010FAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.4","matchCriteriaId":"FED13331-16E8-421A-B8F9-10830794F100"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-012","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24020","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-09T19:15:08.197","lastModified":"2026-06-17T03:39:10.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to tamper with signed URLs by appending further data which allows bypass of signature verification."},{"lang":"es","value":"Una falta de paso criptográfico en la implementación del algoritmo hash digest en FortiMail versiones 6.4.0 hasta 6.4.4, y versiones 6.2.0 hasta 6.2.7, puede permitir a un atacante no autenticado manipular las URLs firmadas al añadir más datos que permitan omitir la comprobación de la firma"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:45.573210Z","id":"CVE-2021-24020","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.7","matchCriteriaId":"72F6AEF1-C5BF-4A9A-A843-A152AA168085"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.5","matchCriteriaId":"5DAB4EFB-D73F-4FC5-8FE7-278BADB9F78E"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-027","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26100","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-09T19:15:08.253","lastModified":"2026-06-17T03:42:51.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who intercepts the encrypted messages to manipulate them in such a way that makes the tampering and the recovery of the plaintexts possible."},{"lang":"es","value":"Una falta de paso criptográfico en el servicio Identity-Based Encryption de FortiMail versiones anteriores a 7.0.0, puede permitir a un atacante no autenticado que intercepte los mensajes encriptados manipularlos de tal manera que haga posible la manipulación y la recuperación de textos planos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail before 7.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:44.534072Z","id":"CVE-2021-26100","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.0","matchCriteriaId":"90AFE76C-4C05-41EB-8B5E-5282E6C00CA8"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-003","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26106","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-09T19:15:08.313","lastModified":"2026-06-17T03:42:52.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.4.5 and 6.2.4 through 6.2.5 may allow an authenticated attacker to execute unauthorized commands by running the kdbg CLI command with specifically crafted arguments."},{"lang":"es","value":"Una vulnerabilidad neutralización inapropiada de los elementos especiales usados en comandos del Sistema Operativo en la consola de FortiAP versiones 6.4.1 hasta 6.4.5 y versiones 6.2.4 hasta 6.2.5, puede permitir a un atacante autenticado ejecutar comandos no autorizados al ejecutar el comando kdbg CLI con argumentos específicamente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAP-W2, FortiAP-S, FortiAP","versions":[{"version":"FortiAP-W2 6.2.4 through 6.2.5; FortiAP-S 6.2.4 through 6.2.5; FortiAP 6.4.1 through 6.4.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:42.961833Z","id":"CVE-2021-26106","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"6.4.6","matchCriteriaId":"4983FD48-A409-4A40-B936-73719B526FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-s:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.4","versionEndExcluding":"6.2.6","matchCriteriaId":"58FFD38C-7193-4118-A0CD-B4D79773F764"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.4","versionEndExcluding":"6.2.6","matchCriteriaId":"3835833F-7C94-487C-800B-6E20DF263E79"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-210","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26099","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-12T10:15:07.687","lastModified":"2026-06-17T03:42:51.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker who comes in possession of the encrypted master keys to compromise their confidentiality by observing a few invariant properties of the ciphertext."},{"lang":"es","value":"Una falta de pasos criptográficos en el servicio de Cifrado Identity-Based de FortiMail versiones anteriores a 7.0.0 puede permitir a un atacante que entre en posesión de las claves maestras cifradas comprometer su confidencialidad al observar algunas propiedades invariables del texto cifrado"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail before 7.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.7,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:40.727512Z","id":"CVE-2021-26099","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"7.0.0","matchCriteriaId":"496F9CE5-591B-494B-9373-FFFC49B95D68"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-244","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26089","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-12T13:15:07.767","lastModified":"2026-06-17T03:42:50.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during installation phase."},{"lang":"es","value":"Un seguimiento inapropiado de los enlaces simbólicos en FortiClient para Mac versiones 6.4.3 y por debajo, puede permitir a un usuario no privilegiado ejecutar comandos de shell con privilegios arbitrarios durante la fase de instalación"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientMac","versions":[{"version":"FortiClientMac 6.4.3 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:40.446514Z","id":"CVE-2021-26089","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionEndIncluding":"6.4.3","matchCriteriaId":"137209AA-6B9E-4D0C-B9B5-832B2F21BD1D"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-022","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-078/","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-078/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2021-26090","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-12T13:15:07.827","lastModified":"2026-06-17T03:42:50.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests."},{"lang":"es","value":"Una vulnerabilidad de falta de liberación de memoria después de su vida útil en el Webmail de FortiMail versiones 6.4.0 hasta 6.4.4 y versiones 6.2.0 hasta 6.2.6, puede permitir a un atacante remoto no autenticado agotar la memoria disponible por medio de peticiones de inicio de sesión específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:16:13.002885Z","id":"CVE-2021-26090","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"0EEAD569-3345-4618-A239-EEDC352C4156"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.5","matchCriteriaId":"5DAB4EFB-D73F-4FC5-8FE7-278BADB9F78E"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-042","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24013","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-12T14:15:07.997","lastModified":"2026-06-17T03:39:09.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests."},{"lang":"es","value":"Múltiples vulnerabilidades de Salto de ruta en el Webmail de FortiMail versiones anteriores a 6.4.4, pueden permitir a un usuario normal conseguir acceso no autorizado a archivos y datos por medio de peticiones web específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail before 6.4.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:37.658707Z","id":"CVE-2021-24013","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.12","matchCriteriaId":"F55E66F3-2827-4707-9720-FBD56335B973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.11","matchCriteriaId":"98D4A72C-BD04-40D1-9561-BE46247CE338"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.7","matchCriteriaId":"FA33C194-BB9C-43C8-864C-15396010FAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.4","matchCriteriaId":"FED13331-16E8-421A-B8F9-10830794F100"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-014","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24015","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-12T14:15:08.057","lastModified":"2026-06-17T03:39:09.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de los elementos especiales usados en un Comando del Sistema Operativo en la interfaz administrativa de FortiMail versiones anteriores a 6.4.4 puede permitir a un atacante autenticado ejecutar comandos no autorizados por medio de peticiones HTTP específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail before 6.4.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:38.760638Z","id":"CVE-2021-24015","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.12","matchCriteriaId":"F55E66F3-2827-4707-9720-FBD56335B973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.11","matchCriteriaId":"98D4A72C-BD04-40D1-9561-BE46247CE338"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.7","matchCriteriaId":"FA33C194-BB9C-43C8-864C-15396010FAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.4","matchCriteriaId":"FED13331-16E8-421A-B8F9-10830794F100"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-021","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26088","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-12T14:15:08.113","lastModified":"2026-06-17T03:42:50.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets."},{"lang":"es","value":"Una vulnerabilidad de autenticación inapropiada en FSSO Collector versiones 5.0.295 de  y posteriores, puede permitir a un usuario no autenticado omitir una política de firewall de FSSO y acceder a la red protegida por medio del envío de paquetes de notificación de inicio de sesión UDP específicamente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FSSO Windows DC Agent, FSSO Windows CA","versions":[{"version":"FSSO Windows DC Agent 5.0.295, 5.0.294; FSSO Windows CA 5.0.295, 5.0.294","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","baseScore":5.8,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:39.555616Z","id":"CVE-2021-26088","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinet_single_sign-on:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4.6","matchCriteriaId":"B9C9AF5B-2891-4908-B559-186BD7B3CF3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinet_single_sign-on:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.1","matchCriteriaId":"B8245F68-9860-40E6-9F45-8B1789FA5620"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-191","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22125","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-20T11:15:11.340","lastModified":"2026-06-17T03:36:39.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated administrator to execute commands on the underlying system's shell via altering the content of its configuration file."},{"lang":"es","value":"Una instancia de neutralización inapropiada de elementos especiales en el módulo sniffer de FortiSandbox versiones anteriores a 3.2.2, puede permitir a un administrador autenticado ejecutar comandos en el shell del sistema subyacente por medio de la alteración del contenido de su archivo de configuración"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox before 3.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":2.1,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:38.254063Z","id":"CVE-2021-22125","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.2","matchCriteriaId":"D0E0C75A-847D-44A5-BF9A-FCBA41ED8F3C"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-005","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24022","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-20T11:15:11.410","lastModified":"2026-06-17T03:39:10.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and FortiManager CLI 6.4.5 and below, 6.2.7 and below, 6.0.x may allow an authenticated, local attacker to perform a Denial of Service attack by running the `diagnose system geoip-city` command with a large ip value."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en FortiAnalyzer CLI versiones 6.4.5 y posteriores, versiones 6.2.7 y posteriores, versiones 6.0.x y FortiManager CLI versiones 6.4.5 y posteriores, 6.2.7 y posteriores, 6.0.x, puede permitir a un atacante local autenticado llevar a cabo un ataque de Denegación de Servicio al ejecutar el comando \"diagnose system geoip-city\" con un valor de ip grande"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAnalyzer, FortiManager","versions":[{"version":"FortiAnalyzer 6.4.5 and below, 6.2.7 and below,  6.0.x; FortiManager 6.4.5 and below, 6.2.7 and below, 6.0.x","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:35.881419Z","id":"CVE-2021-24022","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.8","matchCriteriaId":"52DE1440-D5F1-46DB-9BC7-141A2B733C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"23A36459-01FE-4ABC-8C5B-783408B43E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.8","matchCriteriaId":"E173AE85-7701-44F5-A7B7-37337EB1B28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"F3FC7F19-2794-4E8E-A93A-4031D94D2A7F"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-194","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26095","sourceIdentifier":"psirt@fortinet.com","published":"2021-07-20T11:15:11.477","lastModified":"2026-06-17T03:42:51.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, including the encryption construction of the session cookie, may allow a remote attacker already in possession of a cookie to possibly reveal and alter or forge its content, thereby escalating privileges."},{"lang":"es","value":"Una combinación de varios problemas criptográficos en la administración de sesiones de FortiMail versiones 6.4.0 hasta 6.4.4 y versiones 6.2.0 hasta 6.2.6, incluyéndo la construcción del cifrado de la cookie de sesión, puede permitir a un atacante remoto que ya esté en posesión de una cookie, a posiblemente revelar y alterar o falsificar su contenido, escalando así los privilegios"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:34.648152Z","id":"CVE-2021-26095","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"0EEAD569-3345-4618-A239-EEDC352C4156"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.5","matchCriteriaId":"5DAB4EFB-D73F-4FC5-8FE7-278BADB9F78E"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-019","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26098","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T14:15:08.103","lastModified":"2026-06-17T03:42:51.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs."},{"lang":"es","value":"Un espacio pequeño de valores aleatorios en la API RPC de FortiSandbox versiones anteriores a 4.0.0, podría permitir a un atacante en posesión de algunas piezas de información sobre el estado del dispositivo predecir posiblemente los ID de sesión válidos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox before 4.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:36.294223Z","id":"CVE-2021-26098","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.4","matchCriteriaId":"0FF1C5C7-9E7C-4DBD-AF52-3B5C011E4A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.3","matchCriteriaId":"F485DCE0-8055-418B-A91D-F9D647F3BFD3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-218","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32590","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T14:15:08.200","lastModified":"2026-06-17T03:53:13.813","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow an attacker with regular user's privileges to execute arbitrary commands on the underlying SQL database via specifically crafted HTTP requests."},{"lang":"es","value":"Múltiples vulnerabilidades de neutralización inapropiada de elementos especiales usados en un comando SQL en FortiPortal versiones 6.0.0 hasta 6.0.4, versiones 5.3.0 hasta 5.3.5, versiones 5.2.0 hasta 5.2.5, y versiones 4.2.2 y anteriores pueden permitir a un atacante con privilegios de usuario regular ejecutar comandos arbitrarios en la base de datos SQL subyacente por medio de peticiones HTTP específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, 4.2.2 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":9.9,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.1,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:33.269709Z","id":"CVE-2021-32590","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.2","matchCriteriaId":"7FCD5094-CA24-4567-BCF3-6771E07406F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.4","matchCriteriaId":"5D792EF0-8FE3-4433-A192-816802C5CEC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.2","matchCriteriaId":"38B071DD-7C34-4EDC-9D87-EE0C32DA8256"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.4","matchCriteriaId":"638521CB-28CE-4C96-88FE-270E6E9867EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.3","matchCriteriaId":"4AE4255A-A854-4A11-8860-A558E1D77F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.2","matchCriteriaId":"6F09B0F2-D95C-478B-9AA2-CCE1D2D1E497"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndExcluding":"5.2.6","matchCriteriaId":"5EE99890-206F-4F97-B7A5-6E59FB77221E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.6","matchCriteriaId":"97B4F8A2-CD69-436F-9080-323AE2ACFDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.5","matchCriteriaId":"53B6FCC7-F713-42FC-B666-7169DC7A2BEA"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-084","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32594","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T14:15:08.257","lastModified":"2026-06-17T03:53:14.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow a low-privileged user to potentially tamper with the underlying system's files via the upload of specifically crafted files."},{"lang":"es","value":"Una vulnerabilidad de carga de archivos no restringida en la interfaz web de FortiPortal versiones 6.0.0 hasta 6.0.4, versiones 5.3.0 hasta 5.3.5, versiones 5.2.0 hasta 5.2.5, y versiones 4.2.2 y anteriores puede permitir a un usuario poco privilegiado manipular potencialmente los archivos del sistema subyacente por medio de la carga de archivos específicamente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:34.138571Z","id":"CVE-2021-32594","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.4","matchCriteriaId":"5D792EF0-8FE3-4433-A192-816802C5CEC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.2","matchCriteriaId":"38B071DD-7C34-4EDC-9D87-EE0C32DA8256"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.4","matchCriteriaId":"638521CB-28CE-4C96-88FE-270E6E9867EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.3","matchCriteriaId":"4AE4255A-A854-4A11-8860-A558E1D77F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.2","matchCriteriaId":"6F09B0F2-D95C-478B-9AA2-CCE1D2D1E497"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndExcluding":"5.2.6","matchCriteriaId":"5EE99890-206F-4F97-B7A5-6E59FB77221E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.6","matchCriteriaId":"97B4F8A2-CD69-436F-9080-323AE2ACFDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.5","matchCriteriaId":"53B6FCC7-F713-42FC-B666-7169DC7A2BEA"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-092","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24010","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T15:15:08.897","lastModified":"2026-06-17T03:39:09.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated user to obtain unauthorized access to files and data via specifially crafted web requests."},{"lang":"es","value":"Unas vulnerabilidades de limitación inapropiada de una ruta de acceso a un directorio restringido en FortiSandbox versiones 3.2.0 hasta 3.2.2, y versiones 3.1.0 hasta 3.1.4, puede permitir a un usuario autenticado obtener acceso no autorizado a archivos y datos por medio de peticiones web específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:31.846542Z","id":"CVE-2021-24010","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.5","matchCriteriaId":"DA2F5BDA-37D4-4D3D-9143-FAC893546A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.3","matchCriteriaId":"F485DCE0-8055-418B-A91D-F9D647F3BFD3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-202","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24018","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T15:15:08.983","lastModified":"2026-06-17T03:39:10.043","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute arbitrary code via a specifically crafted firmware image."},{"lang":"es","value":"Una vulnerabilidad de subescritura del búfer en la rutina de verificación del firmware de FortiOS versiones anteriores a 7.0.1, puede permitir a un atacante ubicado en la red adyacente ejecutar potencialmente código arbitrario por medio de una imagen de firmware específicamente diseñada"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS before 7.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.9,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","baseScore":5.8,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:32.048495Z","id":"CVE-2021-24018","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.10","matchCriteriaId":"C628FD97-5D1C-48BC-8A4F-932AEFEC2F5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.7","matchCriteriaId":"868E19AD-D2ED-4424-9CA1-56E07BFBC0DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-046","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36168","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T15:15:09.117","lastModified":"2026-06-17T03:58:27.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet FortiPortal 6.x before 6.0.5, FortiPortal 5.3.x before 5.3.6 and any FortiPortal before 6.2.5 allows authenticated attacker to disclosure information via crafted GET request with malicious parameter values."},{"lang":"es","value":"Una limitación inapropiada de un nombre de ruta a un directorio restringido (\"Salto de Ruta\") en Fortinet FortiPortal versiones 6.x anteriores a 6.0.5, FortiPortal versiones 5.3.x anteriores a 5.3.6 y cualquier FortiPortal versiones anteriores a 6.2.5, permite a un atacante autenticado divulgar información por medio de una petición GET diseñada con valores de parámetros maliciosos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1.2, 5.1.1, 5.1.0, 5.0.3, 5.0.2, 5.0.1, 5.0.0, 4.2.2, 4.2.1, 4.1.2, 4.1.1, 4.0.4, 4.0.3, 4.0.2, 4.0.1, 4.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:30.632261Z","id":"CVE-2021-36168","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionEndExcluding":"5.2.6","matchCriteriaId":"C05F7D12-B00B-4B09-8B86-4464E3E5127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.6","matchCriteriaId":"97B4F8A2-CD69-436F-9080-323AE2ACFDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.5","matchCriteriaId":"53B6FCC7-F713-42FC-B666-7169DC7A2BEA"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-085","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-29011","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T16:15:08.073","lastModified":"2026-06-17T03:10:58.457","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated attacker to execute unauthorized code on the underlying SQL interpreter via specifically crafted HTTP requests."},{"lang":"es","value":"Unas vulnerabilidades de Inyección de instancias SQL en los módulos de búsqueda de sumas de comprobación y de cuarentena MTA de FortiSandbox versiones 3.2.0 hasta 3.2.2, y versiones 3.1.0 hasta 3.1.4, pueden permitir a un atacante autenticado ejecutar código no autorizado en el intérprete SQL subyacente por medio de peticiones HTTP específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:30.547775Z","id":"CVE-2020-29011","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1.5","matchCriteriaId":"BEFB39AD-4E58-4425-835E-B970C9319883"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.2","matchCriteriaId":"4492FB6E-8373-49EE-94D6-534B48731305"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-171","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26097","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T16:15:08.287","lastModified":"2026-06-17T03:42:51.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en una vulnerabilidad de comandos del Sistema Operativo en FortiSandbox versiones 3.2.0 hasta 3.2.2, versiones 3.1.0 hasta 3.1.4, y versiones 3.0.0 hasta 3.0.6, puede permitir a un atacante autenticado con acceso a la interfaz gráfica de usuario web ejecutar código o comandos no autorizados por medio de peticiones HTTP específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0, 3.0.6, 3.0.5, 3.0.4, 3.0.3, 3.0.2, 3.0.1, 3.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:29.024072Z","id":"CVE-2021-26097","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.7","matchCriteriaId":"79D21450-0045-4366-8AE2-305E84862DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.5","matchCriteriaId":"DA2F5BDA-37D4-4D3D-9143-FAC893546A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.3","matchCriteriaId":"F485DCE0-8055-418B-A91D-F9D647F3BFD3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-198","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32596","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T16:15:08.353","lastModified":"2026-06-17T03:53:14.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables."},{"lang":"es","value":"Una vulnerabilidad en el uso de hash unidireccional con una salt predecible en el mecanismo de almacenamiento de contraseñas de FortiPortal versiones 6.0.0 hasta 6.04, puede permitir a un atacante que ya esté en posesión del almacén de contraseñas descifrar las contraseñas mediante tablas precalculadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.5,"impactScore":4.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:29.058908Z","id":"CVE-2021-32596","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"1B2739E2-5E22-4856-B515-9EFAC0D80999"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-094","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26096","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T18:15:09.377","lastModified":"2026-06-17T03:42:51.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to manipulate memory and alter its content by means of specifically crafted command line arguments."},{"lang":"es","value":"Múltiples instancias de desbordamiento de búfer en la región heap de la memoria en el command shell de FortiSandbox versiones anteriores a 4.0.0, pueden permitir a un atacante autenticado manipular la memoria y alterar su contenido por medio de argumentos de línea de comandos específicamente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox before 4.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:27.596737Z","id":"CVE-2021-26096","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.4","matchCriteriaId":"0FF1C5C7-9E7C-4DBD-AF52-3B5C011E4A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.3","matchCriteriaId":"F485DCE0-8055-418B-A91D-F9D647F3BFD3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-188","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22124","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T19:15:08.313","lastModified":"2026-06-17T03:36:39.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6; and FortiAuthenticator before 6.0.6 may allow an unauthenticated attacker to bring the device into an unresponsive state via specifically-crafted long request parameters."},{"lang":"es","value":"Una vulnerabilidad de consumo no controlado de recursos (denegación de servicio) en los módulos de inicio de sesión de FortiSandbox versiones 3.2.0 hasta 3.2.2, 3.1.0 hasta 3.1.4, y 3.0.0 hasta 3.0.6; y FortiAuthenticator versiones anteriores a 6.0.6, puede permitir a un atacante no autenticado llevar el dispositivo a un estado de no respuesta por medio de parámetros long request específicamente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox, FortiAuthenticator","versions":[{"version":"FortiSandbox 3.2.2, 3.2.1, 3.2.0, 3.1.4, 3.1.3, 3.1.2, 3.1.1, 3.1.0, 3.0.6, 3.0.5, 3.0.4, 3.0.3, 3.0.2, 3.0.1, 3.0.0, FortiAuthenticator before 6.0.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:16:11.393757Z","id":"CVE-2021-22124","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.3.4","matchCriteriaId":"63F785CE-8B38-4921-AC25-61150158D551"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.5.0","matchCriteriaId":"87F907E6-E99F-4C34-B9DC-67B4894B097C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.6","matchCriteriaId":"635C9972-1D04-4873-BA74-57E97FAD2BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.7","matchCriteriaId":"A1A9A040-A4A5-489F-A4F6-6AE42EAAD7E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.5","matchCriteriaId":"DA2F5BDA-37D4-4D3D-9143-FAC893546A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.2","matchCriteriaId":"4492FB6E-8373-49EE-94D6-534B48731305"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-170","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24014","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-04T19:15:08.373","lastModified":"2026-06-17T03:39:09.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an unauthenticated attacker to perform an XSS attack via specifically crafted request parameters."},{"lang":"es","value":"Múltiples instancias de neutralización inapropiada de la entrada durante la generación de páginas web en FortiSandbox versiones anteriores a 4.0.0, pueden permitir a un atacante no autenticado llevar a cabo un ataque de tipo XSS por medio de parámetros request específicamente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox before 4.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:26.234011Z","id":"CVE-2021-24014","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.4","matchCriteriaId":"0FF1C5C7-9E7C-4DBD-AF52-3B5C011E4A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.3","matchCriteriaId":"F485DCE0-8055-418B-A91D-F9D647F3BFD3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-209","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32598","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-05T11:15:07.417","lastModified":"2026-06-17T03:53:14.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager and FortiAnalyzer GUI 7.0.0, 6.4.6 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow an authenticated and remote attacker to perform an HTTP request splitting attack which gives attackers control of the remaining headers and body of the response."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de las secuencias CRLF en los encabezados HTTP (\"HTTP Response Splitting\") En FortiManager y FortiAnalyzer GUI versiones 7.0.0, 6.4.6 y por debajo, versiones 6.2.8 y por debajo, versiones 6.0.11 y por debajo, versiones 5.6.11 y por debajo puede permitir a un atacante remoto autenticado llevar a cabo un ataque de división de peticiones HTTP que da a atacantes el control de los encabezados restantes y del cuerpo de la respuesta"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAnalyzer, FortiManager","versions":[{"version":"FortiAnalyzer 7.0.0, 6.4.6 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below; FortiManager 7.0.0, 6.4.6 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:24.779376Z","id":"CVE-2021-32598","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-444"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"7.0.1","matchCriteriaId":"E24D10C6-DFD3-4B91-94B4-BF4FA726B269"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"7.0.1","matchCriteriaId":"E1850212-AA27-43EE-8910-2E0B2F4E9FD0"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-063","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32603","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-05T11:15:07.510","lastModified":"2026-06-17T03:53:15.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker to access unauthorized files and services on the system via specifically crafted web requests."},{"lang":"es","value":"Una vulnerabilidad de tipo server-side request forgery (SSRF) (CWE-918) en FortiManager y FortiAnalyser GUI versiones 7.0.0, versiones 6.4.5 y por debajo, versiones 6.2.7 y por debajo, versiones 6.0.11 y por debajo, versiones 5.6.11 y por debajo puede permitir a un atacante remoto autenticado acceder a archivos y servicios no autorizados en el sistema por medio de peticiones web específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAnalyzer, FortiManager","versions":[{"version":"FortiAnalyzer 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below; FortiManager 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below;","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:27.741438Z","id":"CVE-2021-32603","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.2.8","matchCriteriaId":"256FAFAD-2CD4-4BA5-857B-63865B8F8D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"23A36459-01FE-4ABC-8C5B-783408B43E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.1","matchCriteriaId":"3B7A1CCA-079C-47D2-A59D-240559355399"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.2.8","matchCriteriaId":"CF5148AB-9BD7-4DEE-A6FA-E5530A4A71C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"F3FC7F19-2794-4E8E-A93A-4031D94D2A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.1","matchCriteriaId":"1499FB49-2AD0-479A-92D8-B16641369712"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-050","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32587","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-06T11:15:07.357","lastModified":"2026-06-17T03:53:13.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6.4.5 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker with restricted user profile to retrieve the list of administrative users of other ADOMs and their related configuration."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado en la interfaz GUI de FortiManager y FortiAnalyzer versiones 7.0.0, 6.4.5 e inferiores, 6.2.8 e inferiores, 6.0.11 e inferiores, 5.6.11 e inferiores, puede permitir a un atacante remoto autenticado con perfil de usuario restringido recuperar la lista de usuarios administrativos de otros ADOM y su configuración relacionada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAnalyzer, FortiManager","versions":[{"version":"FortiAnalyzer 7.0.0, 6.4.5 and below, 6.2.8 and below, 6.0.11and below, 5.6.11and below; FortiManager 7.0.0, 6.4.5 and below, 6.2.8 and below, 6.0.11and below, 5.6.11and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:22.254983Z","id":"CVE-2021-32587","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.4.6","matchCriteriaId":"455CDD3F-66E9-4D48-A5A4-C26D5A1AFB25"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.1","matchCriteriaId":"3B7A1CCA-079C-47D2-A59D-240559355399"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.4.6","matchCriteriaId":"3DC3C8D6-E6AD-4A9B-B6A6-43E7A5E7A500"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.1","matchCriteriaId":"1499FB49-2AD0-479A-92D8-B16641369712"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-059","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32597","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-06T11:15:07.547","lastModified":"2026-06-17T03:53:14.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of input during web page generation (CWE-79) in FortiManager and FortiAnalyzer versions 7.0.0, 6.4.5 and below, 6.2.7 and below user interface, may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious payload in GET parameters."},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de la página web (CWE-79) en FortiManager y FortiAnalyzer versiones 7.0.0, 6.4.5 y por debajo, 6.2.7 y por debajo de la interfaz de usuario, puede permitir a un atacante remoto autenticado llevar a cabo un ataque de tipo Cross Site Scripting attack (XSS) Almacenado al inyectar una carga útil maliciosa en los parámetros GET"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAnalyzer, FortiManager","versions":[{"version":"FortiAnalyzer 7.0.0, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, ; FortiManager 7.0.0, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0,","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:23.585665Z","id":"CVE-2021-32597","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.8","matchCriteriaId":"77996A0B-46C5-4C91-ACD1-53EB92667066"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"23A36459-01FE-4ABC-8C5B-783408B43E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.1","matchCriteriaId":"3B7A1CCA-079C-47D2-A59D-240559355399"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.8","matchCriteriaId":"E8E2734A-B9FA-44B3-927B-9206FA262FCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"F3FC7F19-2794-4E8E-A93A-4031D94D2A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.1","matchCriteriaId":"1499FB49-2AD0-479A-92D8-B16641369712"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-054","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32588","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-18T22:15:06.857","lastModified":"2026-06-17T03:53:13.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4 and below, versions 5.1.x and 5.0.x may allow a remote and unauthenticated attacker to execute unauthorized commands as root by uploading and deploying malicious web application archive files using the default hard-coded Tomcat Manager username and password."},{"lang":"es","value":"Una vulnerabilidad de uso de credenciales embebidas (CWE-798) en FortiPortal versiones 5.2.5 e inferiores, 5.3.5 e inferiores, 6.0.4 e inferiores, y en versiones 5.1.x y 5.0.x, puede permitir a un atacante no autenticado remoto ejecutar comandos no autorizados como root al cargar y desplegar archivos comprimidos de aplicaciones web maliciosas usando el nombre de usuario y la contraseña predeterminados de Tomcat Manager."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1.2, 5.1.1, 5.1.0, 5.0.3, 5.0.2, 5.0.1, 5.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:19.159785Z","id":"CVE-2021-32588","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.3","matchCriteriaId":"4AE4255A-A854-4A11-8860-A558E1D77F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.2","matchCriteriaId":"6F09B0F2-D95C-478B-9AA2-CCE1D2D1E497"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.5","matchCriteriaId":"D529DC4C-E194-4D22-9B77-44F995BEF8A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.5","matchCriteriaId":"7A637844-8921-4805-88F3-2BDCB4F6C563"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"1B2739E2-5E22-4856-B515-9EFAC0D80999"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-077","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-32602","sourceIdentifier":"psirt@fortinet.com","published":"2021-08-19T00:15:07.560","lastModified":"2026-06-17T03:53:14.997","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability (CWE-79) in FortiPortal GUI 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below may allow a remote and unauthenticated attacker to perform an XSS attack via sending a crafted request with an invalid lang parameter or with an invalid org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE value."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de entrada durante la generación de la página web (CWE-79) en la GUI de FortiPortal versiones 6.0.4 y por debajo, 5.3.6 y por debajo, 5.2.6 y por debajo, 5.1.2 y por debajo, 5.0.3 y por debajo, 4.2.2 y por debajo, 4.1.2 y por debajo, 4.0. 4 y por debajo, pueden permitir a un atacante  no autenticado y remoto llevar a cabo un ataque de tipo XSS por medio de enviar una petición diseñada con un parámetro lang inválido o con un valor org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE inválido."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:16:09.951673Z","id":"CVE-2021-32602","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.4","matchCriteriaId":"5D792EF0-8FE3-4433-A192-816802C5CEC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.2","matchCriteriaId":"38B071DD-7C34-4EDC-9D87-EE0C32DA8256"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.2","matchCriteriaId":"D1E4F9F9-1BF0-4DA3-A5DE-D770BD40D324"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.3","matchCriteriaId":"4AE4255A-A854-4A11-8860-A558E1D77F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.2","matchCriteriaId":"6F09B0F2-D95C-478B-9AA2-CCE1D2D1E497"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.6","matchCriteriaId":"51CAE1B0-E321-462F-B503-2C13AEF3DAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.6","matchCriteriaId":"87C7DE4A-A9DC-49BC-A4DD-40238601A0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"1B2739E2-5E22-4856-B515-9EFAC0D80999"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-066","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-15939","sourceIdentifier":"psirt@fortinet.com","published":"2021-09-06T16:15:07.373","lastModified":"2026-06-17T02:57:26.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attacker to download the device configuration file via the recovery URL."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado (CWE-284) en FortiSandbox versiones 3.2.1 y por debajo y 3.1.4 y por debajo, puede permitir a un atacante autenticado y sin privilegios descargar el archivo de configuración del dispositivo por medio de la URL de recuperación."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox 3.2.1, 3.1.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:20.859540Z","id":"CVE-2020-15939","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1.5","matchCriteriaId":"BEFB39AD-4E58-4425-835E-B970C9319883"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.2","matchCriteriaId":"4492FB6E-8373-49EE-94D6-534B48731305"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-071","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24006","sourceIdentifier":"psirt@fortinet.com","published":"2021-09-06T19:15:07.427","lastModified":"2026-06-17T03:39:08.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker with a restricted user profile to access the SD-WAN Orchestrator panel via directly visiting its URL."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado en FortiManager versiones 6.4.0 a 6.4.3, puede permitir que un atacante autenticado con un perfil de usuario restringido acceda al panel de SD-WAN Orchestrator por medio de una visita directa a su URL."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager","versions":[{"version":"FortiManager 6.4.0 to 6.4.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:19.648147Z","id":"CVE-2021-24006","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.4","matchCriteriaId":"A79F9EBF-3EE5-42E2-B48D-F5B363A1EF5B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-061","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-29012","sourceIdentifier":"psirt@fortinet.com","published":"2021-09-08T11:15:07.237","lastModified":"2026-06-17T03:10:58.563","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain information about other users configured on the device, should the attacker be able to obtain that session ID (via other, hypothetical attacks)"},{"lang":"es","value":"Una vulnerabilidad de expiración de sesión insuficiente en FortiSandbox versiones 3.2.1 y posteriores, puede permitir a un atacante reusar los ID de sesión del usuario administrador no caducados para obtener información sobre otros usuarios configurados en el dispositivo, si el atacante es capaz de obtener ese ID de sesión (por medio de otros ataques hipotéticos)"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox 3.2.1,","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:18.412259Z","id":"CVE-2020-29012","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.2","matchCriteriaId":"D0E0C75A-847D-44A5-BF9A-FCBA41ED8F3C"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-070","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36179","sourceIdentifier":"psirt@fortinet.com","published":"2021-09-08T11:15:07.407","lastModified":"2026-06-17T03:58:28.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute unauthorized code or commands via crafted parameters in CLI command execution"},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria en Fortinet FortiWeb versión 6.3.14 y por debajo, 6.2.4 y por debajo, permite al atacante ejecutar código o comandos no autorizados por medio de parámetros diseñados en la ejecución de comandos CLI"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:26.466363Z","id":"CVE-2021-36179","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.4","matchCriteriaId":"E1E1F97E-7047-4464-A40A-35F36B84ED03"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.14","matchCriteriaId":"5E0772F7-D31C-4945-97C4-A3049AAC40DC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-206","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36182","sourceIdentifier":"psirt@fortinet.com","published":"2021-09-08T11:15:07.467","lastModified":"2026-06-17T03:58:28.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version 6.3.13 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests"},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en un comando (\"Command Injection\") en Fortinet FortiWeb versión 6.3.13 y por debajo, permite al atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:25.342153Z","id":"CVE-2021-36182","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.4","matchCriteriaId":"E1E1F97E-7047-4464-A40A-35F36B84ED03"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.14","matchCriteriaId":"8948F4F0-02C0-428C-8B70-59F4B7E02542"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-047","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24016","sourceIdentifier":"psirt@fortinet.com","published":"2021-09-30T16:15:07.350","lastModified":"2026-06-17T03:39:09.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute arbitrary commands via crafted IPv4 field in policy name, when exported as excel file and opened unsafely on the victim host."},{"lang":"es","value":"Una neutralización inapropiada de los elementos de la fórmula en un archivo csv en Fortinet FortiManager versión 6.4.3 y por debajo, versión  6.2.7 y por debajo, permite al atacante ejecutar comandos arbitrarios por medio de un campo IPv4 diseñado en el nombre de la política, cuando se exporta como archivo excel y es abierto de forma no segura en el host víctima"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager","versions":[{"version":"FortiManager 6.4.3, 6.2.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.7,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.3,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:16.962299Z","id":"CVE-2021-24016","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-1236"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.8","matchCriteriaId":"E8E2734A-B9FA-44B3-927B-9206FA262FCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.4","matchCriteriaId":"A79F9EBF-3EE5-42E2-B48D-F5B363A1EF5B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-190","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24017","sourceIdentifier":"psirt@fortinet.com","published":"2021-09-30T16:15:07.410","lastModified":"2026-06-17T03:39:09.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler."},{"lang":"es","value":"Una autenticación inapropiada en Fortinet FortiManager versión 6.4.3 y siguientes, versión 6.2.6 y por debajo, permite a un atacante asignar módulos arbitrarios de Políticas y Objetos por medio de peticiones diseñadas al manejador de peticiones"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager","versions":[{"version":"FortiManager 6.4.3, 6.2.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:15.789961Z","id":"CVE-2021-24017","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.7","matchCriteriaId":"4BAA02E0-861B-4995-B89C-B62CF5EB4DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.4","matchCriteriaId":"A79F9EBF-3EE5-42E2-B48D-F5B363A1EF5B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-189","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-15941","sourceIdentifier":"psirt@fortinet.com","published":"2021-10-06T10:15:07.623","lastModified":"2026-06-17T02:57:27.710","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta [CWE-22] en FortiClientEMS versiones 6.4.1 y por debajo; versiones 6.2.8 y por debajo, puede permitir a un atacante autenticado inyectar secuencias de caracteres de salto de directorio para añadir/borrar los archivos del servidor por medio del parámetro name de Deployment Packages"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientEMS","versions":[{"version":"FortiClientEMS 6.4.1, 6.4.0, 6.2.8, 6.2.7, 6.2.6, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:11.972028Z","id":"CVE-2020-15941","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.9","matchCriteriaId":"6B4FE62C-CA07-438F-AB71-EC8B67F8954B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"7082B032-189E-402E-9417-953C1B210234"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-074","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24019","sourceIdentifier":"psirt@fortinet.com","published":"2021-10-06T10:15:07.713","lastModified":"2026-06-17T03:39:10.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)"},{"lang":"es","value":"Una vulnerabilidad de caducidad de sesión insuficiente [CWE- 613] en FortiClientEMS versiones 6.4.2 y por debajo, versiones 6.2.8 y por debajo, puede permitir a un atacante reusar los ID de sesión del usuario administrador no caducados para obtener privilegios de administrador, si el atacante es capaz de obtener ese ID de sesión (por medio de otros ataques hipotéticos)"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientEMS","versions":[{"version":"FortiClientEMS 6.4.2, 6.4.1, 6.4.0, 6.2.8, 6.2.7, 6.2.6, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T21:01:22.461506Z","id":"CVE-2021-24019","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.9","matchCriteriaId":"6B4FE62C-CA07-438F-AB71-EC8B67F8954B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"7082B032-189E-402E-9417-953C1B210234"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-072","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24021","sourceIdentifier":"psirt@fortinet.com","published":"2021-10-06T10:15:07.767","lastModified":"2026-06-17T03:39:10.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the column settings of Logview in FortiAnalyzer, should the attacker be able to obtain that POST request, via other, hypothetical attacks."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada [CWE-79] en FortiAnalyzer versiones 6.4.3 y por debajo, 6.2.7 y por debajo y 6.0.10 y por debajo, puede permitir a un atacante remoto autenticado llevar a cabo un ataque de tipo cross site scripting attack (XSS) almacenado por medio de la configuración de la columna de Logview en FortiAnalyzer, si el atacante es capaz de obtener esa petición POST, por medio de otros ataques hipotéticos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAnalyzer","versions":[{"version":"FortiAnalyzer 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:09.434550Z","id":"CVE-2021-24021","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.8","matchCriteriaId":"52DE1440-D5F1-46DB-9BC7-141A2B733C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.4","matchCriteriaId":"1DFAE936-3532-402A-BA0F-990C293D3F2F"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-098","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36170","sourceIdentifier":"psirt@fortinet.com","published":"2021-10-06T10:15:07.873","lastModified":"2026-06-17T03:58:27.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in cleartext."},{"lang":"es","value":"Una vulnerabilidad de divulgación de información [CWE-200] en FortiAnalyzerVM y FortiManagerVM versiones 7.0.0 y 6.4.6 y por debajo, puede permitir a un atacante autenticado leer las credenciales de FortiCloud que fueron usadas para activar la licencia de prueba en texto sin cifrar"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager, FortiAnalyzer","versions":[{"version":"FortiManager 7.0.0, 6.4.6; FortiAnalyzer 7.0.0, 6.4.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","baseScore":3.2,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.5,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","baseScore":3.2,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.5,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:13.307322Z","id":"CVE-2021-36170","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4.7","matchCriteriaId":"2FBEBDB5-13B7-41F8-8929-6610C44CEF0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.1","matchCriteriaId":"E192E282-D0A3-4DA5-891E-5B58D2847A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4.7","matchCriteriaId":"AE7F8F52-51AD-4B28-9BC4-B6D2EF58C891"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.1","matchCriteriaId":"1499FB49-2AD0-479A-92D8-B16641369712"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-112","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36175","sourceIdentifier":"psirt@fortinet.com","published":"2021-10-06T10:15:07.923","lastModified":"2026-06-17T03:58:27.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability [CWE-79] in FortiWebManager versions 6.2.3 and below, 6.0.2 and below may allow a remote authenticated attacker to inject malicious script/tags via the name/description/comments parameter of various sections of the device."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de entradas [CWE-79] en FortiWebManager versiones 6.2.3 y por debajo, 6.0.2 y por debajo; puede permitir a un atacante remoto autenticado inyectar scripts/etiquetas maliciosas por medio del parámetro name/description/comments de varias secciones del dispositivo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWebManager","versions":[{"version":"FortiWebManager 6.0.2 6.2.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:10.660899Z","id":"CVE-2021-36175","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.4","matchCriteriaId":"38CF8501-0108-412E-9B8E-2E7DAA3E5AB0"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-027","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36178","sourceIdentifier":"psirt@fortinet.com","published":"2021-10-06T10:15:07.977","lastModified":"2026-06-17T03:58:28.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup."},{"lang":"es","value":"Una protección insuficiente de las credenciales en Fortinet FortiSDNConnector versión 1.1.7 y por debajo, permite a un atacante divulgar información de credenciales de dispositivos de terceros por medio de la búsqueda en la página de configuración"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSDNConnector","versions":[{"version":"FortiSDNConnector 1.1.7, 1.1.6, 1.1.5, 1.1.4, 1.1.3, 1.1.2, 1.1.1, 1.1.0, 1.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:14.516117Z","id":"CVE-2021-36178","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisdnconnector:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.8","matchCriteriaId":"3AE6C99E-9DC8-411A-85A7-38FF390D0944"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-183","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-12814","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T18:15:07.730","lastModified":"2026-06-17T02:52:20.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI."},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de una página web (\"cross-site scripting\") en Fortinet FortiAnalyzer versión 6.0.6 y por debajo, versión 6.4.4, permite a un atacante ejecutar código o comandos no autorizados por medio de peticiones específicamente diseñadas a la GUI de la web"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAnalyzer","versions":[{"version":"FortiAnalyzer 6.4.4, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:00.549087Z","id":"CVE-2020-12814","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"715BA8F9-3373-434A-961E-F46ACD4E0AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","matchCriteriaId":"CEFB6D46-1A98-4692-B7A9-53F2C61AB4A6"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-092","source":"psirt@fortinet.com","tags":["Broken Link","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-15940","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T18:15:07.787","lastModified":"2026-06-17T02:57:26.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via the name parameter of various sections of the server."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada [CWE-79] en FortiClientEMS versiones 6.4.1 y por debajo y 6.2.9 y por debajo, puede permitir a un atacante remoto autenticado inyectar scripts/etiquetas maliciosas por medio del parámetro name de varias secciones del servidor"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientEMS","versions":[{"version":"FortiClientEMS 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.8, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:03.202859Z","id":"CVE-2020-15940","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.8","matchCriteriaId":"51432654-180F-4BAE-B3B9-0D75CB9B67CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"9C331B17-F3B4-42C1-8050-F35414C5686C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.1","matchCriteriaId":"CE8B9DBB-DA14-46EA-BCCF-73137825D345"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-067","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26107","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T18:15:08.377","lastModified":"2026-06-17T03:42:52.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado [CWE-284] en FortiManager versiones 6.4.4 y 6.4.5, puede permitir a un atacante autenticado con un perfil de usuario restringido modificar el estado del túnel VPN de otros VDOMs usando VPN Manager"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager","versions":[{"version":"FortiManager 6.4.5, 6.4.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:01.867833Z","id":"CVE-2021-26107","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","matchCriteriaId":"868332C7-79E7-46AC-B739-2BA610A8E8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","matchCriteriaId":"50040ED3-BBB3-4ED2-AEA1-0B3FC9FF2CB6"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-043","source":"psirt@fortinet.com","tags":["Broken Link"]},{"url":"https://www.fortiguard.com/psirt?date=11-2021&risk=3","source":"nvd@nist.gov","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2021-32595","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T18:15:08.497","lastModified":"2026-06-17T03:53:14.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a denial of service via multiple HTTP requests."},{"lang":"es","value":"Múltiples vulnerabilidades de consumo de recursos no controlables en la interfaz web de FortiPortal versiones anteriores a 6.0.6, pueden permitir a un único usuario poco privilegiado inducir una denegación de servicio por medio de múltiples peticiones HTTP"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal before 6.0.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:59.349333Z","id":"CVE-2021-32595","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"5.3.7","matchCriteriaId":"F3AF186D-F8CF-4050-B41E-FE25825C7834"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.6","matchCriteriaId":"08ECB3CD-EAA3-488F-9711-85F88B80E2F1"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-096","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36172","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T18:15:08.553","lastModified":"2026-06-17T03:58:27.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper restriction of XML external entity reference vulnerability in the parser of XML responses of FortiPortal before 6.0.6 may allow an attacker who controls the producer of XML reports consumed by FortiPortal to trigger a denial of service or read arbitrary files from the underlying file system by means of specifically crafted XML documents."},{"lang":"es","value":"Una vulnerabilidad de restricción inapropiada de referencias a entidades externas XML en el analizador de respuestas XML de FortiPortal versiones anteriores a 6.0.6, puede permitir a un atacante que controle el productor de informes XML consumidos por FortiPortal desencadenar una denegación de servicio o leer archivos arbitrarios del sistema de archivos subyacente mediante documentos XML específicamente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal before 6.0.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:06.366031Z","id":"CVE-2021-36172","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.4","matchCriteriaId":"5D792EF0-8FE3-4433-A192-816802C5CEC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.2","matchCriteriaId":"38B071DD-7C34-4EDC-9D87-EE0C32DA8256"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.4","matchCriteriaId":"638521CB-28CE-4C96-88FE-270E6E9867EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.3","matchCriteriaId":"4AE4255A-A854-4A11-8860-A558E1D77F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.2","matchCriteriaId":"6F09B0F2-D95C-478B-9AA2-CCE1D2D1E497"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.6","matchCriteriaId":"51CAE1B0-E321-462F-B503-2C13AEF3DAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.7","matchCriteriaId":"9AD92C9F-8593-43C5-B5C1-F0F8EDE2326E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.6","matchCriteriaId":"08ECB3CD-EAA3-488F-9711-85F88B80E2F1"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-104","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36181","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T18:15:08.607","lastModified":"2026-06-17T03:58:28.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific coordination of web requests."},{"lang":"es","value":"Una ejecución concurrente usando un recurso compartido con una vulnerabilidad de sincronización inapropiada (\"Condición de carrera\") en la interfaz de la base de datos de clientes de FortiPortal versiones anteriores a 6.0.6, puede permitir a un usuario autenticado y poco privilegiado llevar los datos de la base de datos subyacente a un estado inconsistente por medio de una coordinación específica de peticiones web"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal before 6.0.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":3.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":3.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:08.130210Z","id":"CVE-2021-36181","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"6.0.6","matchCriteriaId":"4608D477-FDEB-490F-87FC-3E22E161CD11"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-102","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41019","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T18:15:08.660","lastModified":"2026-06-17T04:07:45.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials."},{"lang":"es","value":"Una vulnerabilidad de comprobación inapropiada de certificado con desajuste de host [CWE-297] en FortiOS versiones 6.4.6 y por debajo, de  puede permitir la conexión a un servidor LDAP malicioso por medio de las opciones de la interfaz gráfica de usuario, conllevando a una divulgación de información confidencial, como las credenciales de AD"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":3.5,"baseSeverity":"LOW","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:58:04.355347Z","id":"CVE-2021-41019","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"88D6903E-70D0-4D63-BC68-BA37EE91BCB1"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-074","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-15935","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:07.523","lastModified":"2026-06-17T02:57:26.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields."},{"lang":"es","value":"Un almacenamiento de texto sin cifrar de información confidencial en la Interfaz Gráfica de Usuario en FortiADC versiones 5.4.3 y por debajo, 6.0.0 y por debajo, puede permitir a un atacante remoto autenticado recuperar alguna información confidencial como las contraseñas LDAP de los usuarios y el secreto compartido RADIUS mediante la desobstrucción de los campos de entrada de las contraseñas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiADC","versions":[{"version":"FortiADC 5.4.3 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:53.054616Z","id":"CVE-2020-15935","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.4.3","matchCriteriaId":"BD0D47C9-C53D-47F7-8AF8-793E94A58A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.1","matchCriteriaId":"5CD59735-2B45-41EC-B3F9-C425E87092DD"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-044","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36174","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:07.733","lastModified":"2026-06-17T03:58:27.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6.0.6 may allow an attacker to perform a denial of service attack via specially crafted license blobs."},{"lang":"es","value":"Una vulnerabilidad de asignación de memoria con valor de tamaño excesivo en la función de verificación de licencias de FortiPortal versiones anteriores a 6.0.6, puede permitir a un atacante llevar a cabo un ataque de denegación de servicio por medio de blobs de licencia especialmente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal before 6.0.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:56.677065Z","id":"CVE-2021-36174","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"6.0.6","matchCriteriaId":"4608D477-FDEB-490F-87FC-3E22E161CD11"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-109","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36176","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:07.783","lastModified":"2026-06-17T03:58:28.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a denial of service via multiple HTTP requests."},{"lang":"es","value":"Múltiples vulnerabilidades de consumo de recursos no controlables en la interfaz web de FortiPortal versiones anteriores a 6.0.6, pueden permitir a un único usuario poco privilegiado inducir una denegación de servicio por medio de múltiples peticiones HTTP"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal before 6.0.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:58.194722Z","id":"CVE-2021-36176","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"6.0.6","matchCriteriaId":"4608D477-FDEB-490F-87FC-3E22E161CD11"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-100","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"The description provided by the CNA does not reconcile with the description provided by the vendor advisory for this CVE"}},{"cve":{"id":"CVE-2021-36183","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:07.830","lastModified":"2026-06-17T03:58:28.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for Forticlient updates."},{"lang":"es","value":"Una vulnerabilidad de autorización inapropiada [CWE-285] en FortiClient para Windows versiones 7.0.1 y por debajo y versiones 6.4.2 y por debajo, puede permitir a un atacante local no privilegiado escalar sus privilegios a SYSTEM por medio de la tubería con nombre responsable de las actualizaciones de Forticlient"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientWindows","versions":[{"version":"FortiClientWindows 7.0.1, 7.0.0, 6.4.2, 6.4.1, 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.4,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:21.590202Z","id":"CVE-2021-36183","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"5E08E1BC-51E1-45A9-A561-F5A26ABD01D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.1","matchCriteriaId":"650BF971-DE28-4FE8-AF8D-2E9CC2E437E2"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-079","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36184","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:07.873","lastModified":"2026-06-17T03:58:29.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to disclosure device, users and database information via crafted HTTP requests."},{"lang":"es","value":"Una neutralización inapropiada de los Elementos Especiales usados en un Comando SQL (\"Inyección SQ\") en Fortinet FortiWLM versión 8.6.1 y por debajo, permite al atacante divulgar información de dispositivos, usuarios y bases de datos por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLM","versions":[{"version":"FortiWLM 8.6.1, 8.6.0, 8.5.2, 8.5.1, 8.5.0, 8.4.2, 8.4.1, 8.4.0, 8.3.2, 8.3.1, 8.3.0, 8.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:19.132484Z","id":"CVE-2021-36184","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.2","versionEndIncluding":"8.6.1","matchCriteriaId":"A7006C5D-F055-4051-9D91-F792108147FD"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-107","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36185","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:07.920","lastModified":"2026-06-17T03:58:29.113","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an OS command ('OS Command Injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en un comando del Sistema Operativo ('Inyección de Comandos del Sistema Operativo\") en Fortinet FortiWLM versión 8.6.1 y por debajo, permite a un atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLM","versions":[{"version":"FortiWLM 8.6.1, 8.6.0, 8.5.2, 8.5.1, 8.5.0, 8.4.2, 8.4.1, 8.4.0, 8.3.2, 8.3.1, 8.3.0, 8.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:20.391959Z","id":"CVE-2021-36185","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.2","versionEndIncluding":"8.6.1","matchCriteriaId":"A7006C5D-F055-4051-9D91-F792108147FD"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-110","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36186","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:07.967","lastModified":"2026-06-17T03:58:29.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests"},{"lang":"es","value":"Un desbordamiento del búfer en la región stack de la memoria en Fortinet FortiWeb versión 6.4.0, versión 6.3.15 y por debajo, 6.2.5 y por debajo, permite al atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:22.805548Z","id":"CVE-2021-36186","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.5","matchCriteriaId":"60265BD0-4C66-43FF-898B-9433B4D4B0F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-119","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36187","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:08.017","lastModified":"2026-06-17T03:58:29.343","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to cause a denial of service for webserver daemon via crafted HTTP requests"},{"lang":"es","value":"Un consumo no controlado de recursos en Fortinet FortiWeb versión 6.4.0, versión 6.3.15 y por debajo, 6.2.5 y por debajo, permite al atacante causar una denegación de servicio para el demonio del servidor web por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.9.1, 5.9.0, 5.8.7, 5.8.6, 5.8.5, 5.8.3, 5.8.2, 5.8.1, 5.8.0, 5.7.3, 5.7.2, 5.7.1, 5.7.0, 5.6.2, 5.6.1, 5.6.0, 5.5.7, 5.5.6, 5.5.5, 5.5.4, 5.5.3, 5.5.2, 5.5.1, 5.5.0, 5.4.1, 5.4.0, 5.3.9, 5.3.8, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1.4, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.6, 5.0.5, 5.0.4, 5.0.3, 5.0.2, 5.0.1, 5.0.0, 4.4.7, 4.4.6, 4.4.5, 4.4.4, 4.4.3, 4.4.2, 4.4.1, 4.4.0, 4.3.7, 4.3.6, 4.3.5, 4.3.4, 4.3.3, 4.3.2, 4.3.1, 4.2.4, 4.2.3, 4.2.2, 4.2.0, 4.1.2, 4.1.1, 4.1.0, 4.0.2, 3.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:16:08.544715Z","id":"CVE-2021-36187","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.5","matchCriteriaId":"60265BD0-4C66-43FF-898B-9433B4D4B0F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-039","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41022","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:08.073","lastModified":"2026-06-17T04:07:45.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or commands via powershell scripts"},{"lang":"es","value":"Una administración inapropiada de privilegios en Fortinet FortiSIEM Windows Agent versión 4.1.4 y por debajo, permite a un atacante ejecutar código o comandos privilegiados por medio de scripts powershell"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSIEMWindowsAgent","versions":[{"version":"FortiSIEMWindowsAgent 4.1.4, 4.1.3, 4.1.2, 4.1.1, 4.1.0, 4.0.0, 3.3.0, 3.2.2, 3.2.1, 3.2.0, 3.1.2, 3.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:24.050265Z","id":"CVE-2021-41022","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"4.1.4","matchCriteriaId":"B052CC93-F0C7-4094-B859-42DF247C9521"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-176","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41023","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:08.120","lastModified":"2026-06-17T04:07:45.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files"},{"lang":"es","value":"Un almacenamiento desprotegido de credenciales en Fortinet FortiSIEM Windows Agent versión 4.1.4 y por debajo, permite a un usuario autenticado revelar la contraseña del agente debido al almacenamiento de credenciales en texto plano en los archivos de registro"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSIEMWindowsAgent","versions":[{"version":"FortiSIEMWindowsAgent 4.1.4, 4.1.3, 4.1.2, 4.1.1, 4.1.0, 4.0.0, 3.3.0, 3.2.2, 3.2.1, 3.2.0, 3.1.2, 3.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:55.442977Z","id":"CVE-2021-41023","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"4.1.4","matchCriteriaId":"B052CC93-F0C7-4094-B859-42DF247C9521"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-175","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42754","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-02T19:15:08.223","lastModified":"2026-06-17T04:10:04.560","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file."},{"lang":"es","value":"Una vulnerabilidad de control inapropiado de generación de código [CWE-94] en FortiClientMacOS versiones 7.0.0 y por debajo y 6.4.5 y por debajo, puede permitir a un atacante autenticado secuestrar la cámara de MacOS sin el permiso del usuario por medio del archivo dylib malicioso"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientMac","versions":[{"version":"FortiClientMac 7.0.0, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","baseScore":3.2,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.5,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.3,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:54.351633Z","id":"CVE-2021-42754","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.5","matchCriteriaId":"937EE132-4DFC-4F98-AFEE-BE2413A712CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:macos:*:*","matchCriteriaId":"63E9F1CD-DF46-4AC5-9EA6-9C63C2816AD4"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-079","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36192","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-03T11:15:08.203","lastModified":"2026-06-17T03:58:29.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and below, 6.2.x, 6.0.x, 5.6.0 may allow a FortiGate user to see scripts from other ADOMS."},{"lang":"es","value":"Una vulnerabilidad de exposición de información confidencial a un actor no autorizado [CWE-200] en FortiManager versiones 7.0.1 y anteriores, 6.4.6 y anteriores, 6.2.x, 6.0.x, 5.6.0, puede permitir a un usuario de FortiGate ver scripts de otros ADOMS"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager","versions":[{"version":"FortiManager 7.0.1 and below, 6.4.6 and below, 6.2.x, 6.0.x, 5.6.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":5.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.0,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":3.8,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.0,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:51.717117Z","id":"CVE-2021-36192","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.11","matchCriteriaId":"BC5BB5B9-7C51-4840-9D25-DA41C0EF16C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"FD729EF3-1665-4CE7-9FDD-450D5F79A2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.8","matchCriteriaId":"02757CD3-E46A-4058-BA29-141FF64718E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"F3FC7F19-2794-4E8E-A93A-4031D94D2A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.1","matchCriteriaId":"1499FB49-2AD0-479A-92D8-B16641369712"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-103","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32600","sourceIdentifier":"psirt@fortinet.com","published":"2021-11-17T12:15:16.917","lastModified":"2026-06-17T03:53:14.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and the network interface list."},{"lang":"es","value":"Una vulnerabilidad de exposición de información confidencial a un actor no autorizado en FortiOS CLI versiones 7.0.0, 6.4.0 a 6.4.6, 6.2.0 a 6.2.9, 6.0.x y 5.6.x, puede permitir a un usuario local y autenticado asignado a un VDOM específico recuperar información de otros VDOMs como la lista de cuentas de administrador y la lista de interfaces de red"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x, 5.6.x","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":3.8,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.0,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:50.392219Z","id":"CVE-2021-32600","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.9","matchCriteriaId":"F5C3E2FE-ACE4-4E66-AEBB-E10E451A2F3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.13","matchCriteriaId":"A6EF01D9-50FB-4300-87FB-132649A9AC51"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.10","matchCriteriaId":"8EE47BA6-6F1B-40E9-8FE5-5752389875DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.7","matchCriteriaId":"868E19AD-D2ED-4424-9CA1-56E07BFBC0DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-243","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32592","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-01T12:15:07.560","lastModified":"2026-06-17T03:53:14.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path."},{"lang":"es","value":"Una vulnerabilidad de ruta de búsqueda no segura en FortiClientWindows versiones 7.0.0, 6.4.6 y anteriores, 6.2.x, 6.0.x y FortiClientEMS 7.0.0, 6.4.6 y anteriores, 6.2.x, 6.0.x puede permitir a un atacante llevar a cabo un ataque de secuestro de DLL en los dispositivos afectados por medio de una biblioteca de motor OpenSSL maliciosa en la ruta de búsqueda"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientWindows, FortiClientEMS","versions":[{"version":"FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x; FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:17.944651Z","id":"CVE-2021-32592","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.9","matchCriteriaId":"4BF4B4CA-81E0-42EA-9EA4-66A4414345C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.7","matchCriteriaId":"498A1406-3D4F-4935-82E3-7BE699136DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:windows:*:*","matchCriteriaId":"43B7F057-9D03-4687-8B04-FDE3A94C3EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"239E4215-D6D7-48D4-A3AF-5981C949A700"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"9C331B17-F3B4-42C1-8050-F35414C5686C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.7","matchCriteriaId":"C7015BBF-7E52-410C-9158-BC08C4AD9CA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C448C03-C45D-4348-BE21-352FFCA4DEFD"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-088","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26110","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T11:15:11.683","lastModified":"2026-06-17T03:42:52.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and FortiProxy 2.0.1 and below, 1.2.9 and below may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script and auto-script features."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado [CWE-284] en el demonio autod de FortiOS versiones 7.0.0, 6.4.6 y anteriores, 6.2.9 y anteriores, 6.0.12 y anteriores y FortiProxy 2.0.1 y anteriores, 1.2.9 y anteriores, puede permitir a un atacante autenticado con pocos privilegios escalar sus privilegios a super_admin por medio de una configuración específica diseñada del script CLI de automatización de tejidos y de las funciones de auto-script"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS, FortiProxy","versions":[{"version":"FortiOS 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below. FortiProxy 2.0.1 and below, 1.2.9 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:16.701692Z","id":"CVE-2021-26110","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.9","matchCriteriaId":"73F1E981-42BC-476D-B041-889BE6EF654F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E986BB97-4883-4B26-9C67-681BB4D2EFA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.14","matchCriteriaId":"AC0AFBC1-5C11-412E-9979-AF89DD26EFCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"B09D1C32-BF6B-4B27-91D4-1347EFB8ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C4C0308D-8E52-456B-BFC2-62D4C1E9BDC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"88D6903E-70D0-4D63-BC68-BA37EE91BCB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-131","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36180","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T11:15:11.793","lastModified":"2026-06-17T03:58:28.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.5 and below may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests."},{"lang":"es","value":"Múltiples vulnerabilidades de neutralización inapropiada de elementos especiales usados en un comando [CWE-77] en la interfaz de administración de FortiWeb 6.4.1 y anteriores, 6.3.15 y anteriores, 6.2.5 y anteriores pueden permitir a un atacante autenticado ejecutar código o comandos no autorizados por medio de parámetros diseñados de peticiones HTTP"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1 and below, 6.3.15 and below, 6.2.5 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:48.698144Z","id":"CVE-2021-36180","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.8.0","versionEndIncluding":"5.8.6","matchCriteriaId":"6C2D4490-1DC9-4901-8408-079271C39D4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"C5931460-A0F1-4BED-ADEF-A48602EA747C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.5","matchCriteriaId":"60265BD0-4C66-43FF-898B-9433B4D4B0F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"E06648CF-D92B-4A29-8600-FFFFC84AA435"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:5.9.1:*:*:*:*:*:*:*","matchCriteriaId":"00331438-9892-4210-B85A-E88382018927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"96B929BB-7B7A-40D2-AB13-D4FDD41FD159"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A3C5370-3453-4F07-B551-7E36F815578C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-120","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42757","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T11:15:11.840","lastModified":"2026-06-17T04:10:05.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments."},{"lang":"es","value":"Un desbordamiento de búfer [CWE-121] en la biblioteca del cliente TFTP de FortiOS versiones anteriores a 6.4.7 y FortiOS versiones 7.0.0 hasta 7.0.2, puede permitir a un atacante local autenticado lograr una ejecución de código arbitrario por medio de argumentos de línea de comandos especialmente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.13","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.14","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.13","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.15","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDDoS-F","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortiddos-f:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.3.0","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.2","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.7","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"},{"version":"2.7.0","lessThanOrEqual":"2.7.7","versionType":"semver","status":"affected"},{"version":"2.6.0","lessThanOrEqual":"2.6.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.8","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.6","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.2","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.6","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","versions":[{"version":"1.5.0","lessThanOrEqual":"1.5.2","versionType":"semver","status":"affected"},{"version":"1.4.0","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDDoS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortiddos:5.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.5.0","lessThanOrEqual":"5.5.1","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.3","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.2","versionType":"semver","status":"affected"},{"version":"5.2.0","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"},{"version":"4.7.0","status":"affected"},{"version":"4.6.0","status":"affected"},{"version":"4.5.0","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitch","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitch:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.8:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.2","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.5","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.7","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.8","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.4","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.8","versionType":"semver","status":"affected"},{"version":"5.9.0","lessThanOrEqual":"5.9.2","versionType":"semver","status":"affected"},{"version":"5.8.5","lessThanOrEqual":"5.8.7","versionType":"semver","status":"affected"},{"version":"5.8.0","lessThanOrEqual":"5.8.3","versionType":"semver","status":"affected"},{"version":"5.7.0","lessThanOrEqual":"5.7.3","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.2","versionType":"semver","status":"affected"},{"version":"5.5.0","lessThanOrEqual":"5.5.7","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.1","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.9","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.4","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.4","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"6.1.5","matchCriteriaId":"D6DD5253-F76E-4799-BB45-79D7B7ACFFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.2","matchCriteriaId":"075C4223-7586-4799-AFA8-7B578BD144B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.4.7","matchCriteriaId":"CF9AE101-566A-4460-AA97-18288BBD7639"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"CCEB8E5F-BBF2-4E6E-91C6-AA47E2CAD022"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"6.2.7","matchCriteriaId":"3E2DC5CE-ED48-48B7-8654-7B29A65A7454"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"C0A5C345-7055-4F18-AE77-FF1DBE41AB89"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"43038EC9-6FD3-488C-8CA3-8B4A705C3E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.4.7","matchCriteriaId":"958C238F-B3DD-41A7-801D-0C39143A5E09"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"7C5772DB-7F52-479C-914D-778552395990"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.5.2","matchCriteriaId":"F49E4A60-2FA0-4298-BF2E-53C86AF21BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios-6k7k:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.8","matchCriteriaId":"BEE493CA-7BE8-454A-82FD-11DB82D8FC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios-6k7k:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"59BD8EE9-6F94-4EA5-B22B-1B446A15F2A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios-6k7k:6.4.6:*:*:*:*:*:*:*","matchCriteriaId":"50BDB150-8E02-427D-A9FC-C7C3C90F0584"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"6.0.10","matchCriteriaId":"9D4A0E2F-41C7-4AFB-AC6D-83E7B1A5FC70"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"2.0.7","matchCriteriaId":"CEBD9074-C3A5-437E-AC44-C41E4B001980"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D909C90B-E136-4E8E-B551-FE0369172C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCB4E87-0AEC-487E-8FAD-E8F647DA21D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.10","matchCriteriaId":"70E9D9A8-EFF1-4ABE-A04D-FD983443DD3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.4","matchCriteriaId":"E8611A25-64A1-4BCE-AA46-E47DFD607CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"6.3.16","matchCriteriaId":"1FEA2E8B-78B6-40AA-9201-BDF4838950CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"6.0.13","matchCriteriaId":"BE1C5491-6C94-48A9-8D59-5162E576E54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C4C0308D-8E52-456B-BFC2-62D4C1E9BDC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"D183D979-7F73-4D02-91B7-D0C93DE55A8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"F2E9D423-721A-482B-BA6B-52E4D8C07C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndIncluding":"6.0.10","matchCriteriaId":"D3E33B56-1975-4B78-A157-E0EADB3BC1B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"1CB7DEA7-E461-43B0-98EB-CE436DE87D98"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.4.9","matchCriteriaId":"C6E5A33E-F744-4CC0-ABA0-D1734845AFBB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"BB3C99AC-DCA1-44A0-9671-F424109A6038"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-173","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42758","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T11:15:11.887","lastModified":"2026-06-17T04:10:05.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado [CWE-284] en FortiWLC versiones 8.6.1 y posteriores, puede permitir a un atacante autenticado y remoto con bajos privilegios ejecutar cualquier comando como usuario administrador con plenos derechos de acceso por medio de omitir las restricciones de la Interfaz Gráfica de Usuario"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLC","versions":[{"version":"FortiWLC 8.6.1 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:15.441432Z","id":"CVE-2021-42758","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.4","versionEndIncluding":"8.2.7","matchCriteriaId":"25BFDC85-6897-4460-BFFA-509307495305"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndIncluding":"8.3.3","matchCriteriaId":"ACFFE94E-710C-4510-9324-CCD328C7FD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.5","matchCriteriaId":"1B888278-5CAD-448A-8AB4-6FFEFFDDE3B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0DBFF939-7478-4D55-9744-EB43D353C267"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"698FF05A-E710-4F99-93CF-70CB18662823"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CD7504A8-52B6-4FFC-A460-1AA6740E271B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DF1BA3B5-77A3-452A-91CD-4B734C54AC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4668970E-2C9D-4658-A382-521B2462B747"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1B8453C8-9F4D-4467-85AB-14CBD10A3004"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.4.2:*:*:*:*:*:*:*","matchCriteriaId":"537154BA-D93B-4DE3-8EC3-1EFA918200AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.4.4:*:*:*:*:*:*:*","matchCriteriaId":"73041763-E646-406A-898B-63983C2AEE87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4D5F5D42-A30F-435B-BFD5-282DD75E957C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.4.6:*:*:*:*:*:*:*","matchCriteriaId":"8EB155DF-D4D5-4DD1-B978-1C612A182F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.4.7:*:*:*:*:*:*:*","matchCriteriaId":"62DE43F8-E402-4AFD-8E01-C1FBBECA5034"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.4.8:*:*:*:*:*:*:*","matchCriteriaId":"59FF326F-1E0A-42FE-B0EC-709BE61AA815"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.6.0:*:*:*:*:*:*:*","matchCriteriaId":"18D7B164-2D5E-427E-81F4-6BBDA51131DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A6647661-B965-41B0-B67A-33F9C050843B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-200","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26103","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T12:15:07.677","lastModified":"2026-06-17T03:42:51.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2.0.3 and below, 1.2.11 and below and FortiGate verison 7.0.0, 6.4.6 and below, 6.2.9 and below of SSL VPN portal may allow a remote, unauthenticated attacker to conduct a cross-site request forgery (CSRF) attack . Only SSL VPN in web mode or full mode are impacted by this vulnerability."},{"lang":"es","value":"Una vulnerabilidad de verificación insuficiente de la autenticidad de los datos (CWE-345) en la interfaz de usuario de FortiProxy versión 2.0.3 y anteriores, 1.2.11 y anteriores y FortiGate versión 7.0.0, 6.4.6 y anteriores, 6.2.9 y anteriores del portal SSL VPN puede permitir a un atacante remoto no autenticado realizar un ataque de tipo cross-site request forgery (CSRF). Sólo la VPN SSL en modo web o en modo completo está afectada por esta vulnerabilidad"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.0.0, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.14, 5.6.13, 5.6.12, 5.6.11, 5.6.10, 5.6.9, 5.6.8, 5.6.7, 5.6.6, 5.6.5, 5.6.4, 5.6.3, 5.6.2, 5.6.1, 5.6.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:43.763511Z","id":"CVE-2021-26103","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.11","matchCriteriaId":"40C734E1-EB71-4469-837D-A7D669AEEB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.3","matchCriteriaId":"522EB71B-D6BA-4966-9CCB-572B9A11467E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.14","matchCriteriaId":"AC0AFBC1-5C11-412E-9979-AF89DD26EFCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.13","matchCriteriaId":"A6EF01D9-50FB-4300-87FB-132649A9AC51"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C4C0308D-8E52-456B-BFC2-62D4C1E9BDC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"88D6903E-70D0-4D63-BC68-BA37EE91BCB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-158","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32591","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T12:15:07.737","lastModified":"2026-06-17T03:53:13.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier may allow an attacker in possession of the password store to compromise the confidentiality of the encrypted secrets."},{"lang":"es","value":"Una vulnerabilidad de pasos criptográficos faltantes en la función que cifra las credenciales LDAP y RADIUS de los usuarios en FortiSandbox versiones anteriores a 4.0.1, FortiWeb versiones anteriores a 6.3.12, FortiADC versiones anteriores a 6.2.1, FortiMail 7.0.1 y anteriores puede permitir que un atacante en posesión del almacén de contraseñas comprometa la confidencialidad de los secretos cifrados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:45.014905Z","id":"CVE-2021-32591","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.4.4","matchCriteriaId":"23AD5C87-6555-4936-A1B8-8229C1F53F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.3","matchCriteriaId":"7B938B6E-915F-42F4-B602-0CDF63E1F9BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.3","matchCriteriaId":"5B3575EF-BFB5-4E8C-ACC2-878CB403503D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FCDF60B5-A0BE-41F6-A0D5-53526A7BBAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B42E0536-4831-4A6B-AC0B-C7AE3CDE3834"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","matchCriteriaId":"87F1A94F-C3C5-4F33-9BA3-70BC3ABED4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndIncluding":"5.6.3","matchCriteriaId":"D00B438D-B50E-4F68-ABCC-5F76108492A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"F19CA06C-67C2-423E-8E65-4502A06EB667"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.7","matchCriteriaId":"72F6AEF1-C5BF-4A9A-A843-A152AA168085"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.5","matchCriteriaId":"07883AF7-1C60-43C9-8D98-CCF2B20C3B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"15993051-6D79-4D59-B43D-EE3DA539AA18"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77F5A17F-E5C0-47EB-AB34-4084943C3143"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.2","matchCriteriaId":"A82C2CB9-6C03-4ADC-93AF-C5798EFA6246"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0260B512-77CA-4FE8-A039-D7B287A19BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.3","matchCriteriaId":"3CAE0CA7-074F-43AD-B8F7-502596CBFF20"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.8.0","versionEndIncluding":"5.8.7","matchCriteriaId":"E2AB0971-D9B6-42A6-BB8B-9CEA66F6609A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"C5931460-A0F1-4BED-ADEF-A48602EA747C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.2","matchCriteriaId":"9B028C2F-34F0-44D2-B6D7-A7024E82801F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.4","matchCriteriaId":"B97AB280-E267-4ED4-B3D8-ABEB65A3353A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.11","matchCriteriaId":"1D2C6405-1C59-4E4F-9999-B9E4A259340A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"E06648CF-D92B-4A29-8600-FFFFC84AA435"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:5.9.1:*:*:*:*:*:*:*","matchCriteriaId":"00331438-9892-4210-B85A-E88382018927"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-222","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41029","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T12:15:07.787","lastModified":"2026-06-17T04:07:46.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests"},{"lang":"es","value":"Una neutralización incorrecta de la entrada durante la generación de la página web (\"Cross-site Scripting\") en Fortinet FortiWLM versión 8.6.1y anteriores, permite al atacante almacenar código javascript malicioso en el dispositivo y desencadenarlo por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLM","versions":[{"version":"FortiWLM 8.6.1, 8.6.0, 8.5.2, 8.5.1, 8.5.0, 8.4.2, 8.4.1, 8.4.0, 8.3.2, 8.3.1, 8.3.0, 8.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:47.518050Z","id":"CVE-2021-41029","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionEndIncluding":"8.6.1","matchCriteriaId":"A9662E2E-859D-4269-8FC0-F9395F86CEB2"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-114","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42752","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T12:15:07.837","lastModified":"2026-06-17T04:10:04.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute malicious javascript code on victim's host via crafted HTTP requests"},{"lang":"es","value":"Una neutralización incorrecta de la entrada durante la generación de la página web (\"Cross-site Scripting\") en Fortinet FortiWLM versión 8.6.1 y anteriores, permite al atacante ejecutar código javascript malicioso en el host de la víctima por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLM","versions":[{"version":"FortiWLM 8.6.1, 8.6.0, 8.5.2, 8.5.1, 8.5.0, 8.4.2, 8.4.1, 8.4.0, 8.3.2, 8.3.1, 8.3.0, 8.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:46.253203Z","id":"CVE-2021-42752","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionEndIncluding":"8.6.1","matchCriteriaId":"A9662E2E-859D-4269-8FC0-F9395F86CEB2"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-111","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42760","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T12:15:07.887","lastModified":"2026-06-17T04:10:05.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.1 and below allows attacker to disclose sensitive information from DB tables via crafted requests."},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en un comando sql (\"inyección sql\") en Fortinet FortiWLM versiones 8.6.1 y anteriores, permite a un atacante revelar información confidencial de las tablas de la base de datos por medio de peticiones diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLM","versions":[{"version":"FortiWLM 8.6.1, 8.6.0, 8.5.2, 8.5.1, 8.5.0, 8.4.2, 8.4.1, 8.4.0, 8.3.2, 8.3.1, 8.3.0, 8.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:12.811658Z","id":"CVE-2021-42760","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionEndIncluding":"8.6.1","matchCriteriaId":"A9662E2E-859D-4269-8FC0-F9395F86CEB2"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-129","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43067","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T12:15:07.933","lastModified":"2026-06-17T04:10:27.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version 6.2.1 and below, version 6.1.2 and below, version 6.0.7 to 6.0.1 allows attacker to duplicate a target LDAP user 2 factors authentication token via crafted HTTP requests."},{"lang":"es","value":"Una exposición de información confidencial a un actor no autorizado en Fortinet FortiAuthenticator versión 6.4.0, versión 6.3.2 y anteriores, versión 6.2.1 y anteriores, versión 6.1.2 y anteriores, versión 6.0.7 a 6.0.1 permite al atacante duplicar un token de autenticación de 2 factores del usuario LDAP objetivo por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAuthenticator","versions":[{"version":"FortiAuthenticator 6.4.0, 6.3.2, 6.3.1, 6.3.0, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":1.7,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:14.006948Z","id":"CVE-2021-43067","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.1","versionEndIncluding":"6.0.7","matchCriteriaId":"0A372CF4-B328-4904-93A8-8F5031B3C5B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8BCCE874-8B7F-4A4A-9A28-C32280E77708"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"34D8DA14-C6EF-4ABC-AEBD-43B0FAC07D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6F666938-8CA7-4DA6-A41F-A0AE5F378271"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"07ADD6A9-D2C8-42EA-95E4-C8E7783E06FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D21B4615-2CD4-47F3-8627-043E4A7A4D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"022EB45B-D4C6-42D2-8A98-37890CFC8257"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"194C9D33-A5DC-4D99-B8DB-AF4167E44E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"744BD74B-58BD-4561-9D6E-A8EDF53A9FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"230C350F-283E-48C4-8D46-BE9434A2CC6E"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-211","source":"psirt@fortinet.com","tags":["Broken Link"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2021-26108","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T13:15:07.603","lastModified":"2026-06-17T03:42:52.527","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering."},{"lang":"es","value":"Una vulnerabilidad en el uso de la clave criptográfica embebida en SSLVPN de FortiOS versiones anteriores a 7.0.1, puede permitir a un atacante recuperar la clave mediante ingeniería inversa"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS before 7.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:16:05.959830Z","id":"CVE-2021-26108","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.13","matchCriteriaId":"7E239D7B-8B65-4639-9390-F62C5A584B18"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"B09D1C32-BF6B-4B27-91D4-1347EFB8ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.8","matchCriteriaId":"D4EB2498-D80C-4C5B-B21F-D51640AB3569"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.5","matchCriteriaId":"B9633128-886B-493E-8F17-00110EE0EF91"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-051","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26109","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T13:15:07.660","lastModified":"2026-06-17T03:42:52.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an unauthenticated attacker to corrupt control data on the heap via specifically crafted requests to SSLVPN, resulting in potentially arbitrary code execution."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de enteros o wraparound en el asignador de memoria de SSLVPN en FortiOS versiones anteriores a 7.0.1, puede permitir a un atacante no autenticado corromper los datos de control en el montón por medio de peticiones específicamente diseñadas a SSLVPN, resultando en una ejecución de código potencialmente arbitraria"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS before 7.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:11.642018Z","id":"CVE-2021-26109","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"B09D1C32-BF6B-4B27-91D4-1347EFB8ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C4C0308D-8E52-456B-BFC2-62D4C1E9BDC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.5","matchCriteriaId":"B9633128-886B-493E-8F17-00110EE0EF91"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-049","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36191","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T13:15:07.787","lastModified":"2026-06-17T03:58:29.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use the device as proxy via crafted GET parameters in requests to error handlers"},{"lang":"es","value":"Una redirección de url a un sitio que no es de confianza (\"open redirect\") en Fortinet FortiWeb versión 6.4.1 y anteriores, 6.3.15 y anteriores, permite a un atacante usar el dispositivo como proxy por medio de parámetros GET diseñados en peticiones a manejadores de errores"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:39.815485Z","id":"CVE-2021-36191","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"C5931460-A0F1-4BED-ADEF-A48602EA747C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"5F9F1235-608A-4301-904F-8CA38A153E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"96B929BB-7B7A-40D2-AB13-D4FDD41FD159"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A3C5370-3453-4F07-B551-7E36F815578C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"415AF153-2A59-488B-A78B-D98B7F39B5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-133","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41014","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T13:15:07.847","lastModified":"2026-06-17T04:07:44.713","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to make the httpsd daemon unresponsive via huge HTTP packets"},{"lang":"es","value":"Un consumo no controlado de recursos en Fortinet FortiWeb versiones 6.4.1 y anteriores, 6.3.15 y anteriores, permite a un atacante no autenticado hacer que el demonio httpsd no responda por medio de enormes paquetes HTTP"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:16:04.138306Z","id":"CVE-2021-41014","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"C5931460-A0F1-4BED-ADEF-A48602EA747C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.5","matchCriteriaId":"60265BD0-4C66-43FF-898B-9433B4D4B0F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"96B929BB-7B7A-40D2-AB13-D4FDD41FD159"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A3C5370-3453-4F07-B551-7E36F815578C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"415AF153-2A59-488B-A78B-D98B7F39B5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-131","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41015","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T13:15:07.903","lastModified":"2026-06-17T04:07:44.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to SAML login handler"},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de la página web (\"Cross-site Scripting\") en Fortinet FortiWeb versión 6.4.1 y anteriores, 6.3.15 y anteriores, permite a un atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP diseñadas al manejador de inicio de sesión SAML"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:41.235532Z","id":"CVE-2021-41015","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-139","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41024","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T13:15:07.957","lastModified":"2026-06-17T04:07:45.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticated, unauthorized attacker to inject path traversal character sequences to disclose sensitive information of the server via the GET request of the login page."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta relativa [CWE-23] en FortiOS versiones 7.0.0 y 7.0.1 y en FortiProxy versión 7.0.0, puede permitir a un atacante no autenticado y no autorizado inyectar secuencias de caracteres de salto de ruta para revelar información confidencial del servidor por medio de la petición GET de la página de inicio de sesión"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.0.1, 7.0.0 FortiProxy 7.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:16:07.290505Z","id":"CVE-2021-41024","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D909C90B-E136-4E8E-B551-FE0369172C1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FBDFDF02-2136-4DE0-A19B-FE3654ED90A4"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-181","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41027","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T13:15:08.013","lastModified":"2026-06-17T04:07:46.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code or commands via crafted certificates loaded into the device."},{"lang":"es","value":"Un desbordamiento del búfer en la región stack de la memoria en Fortinet FortiWeb versiones 6.4.1 y 6.4.0, permite a un atacante autenticado ejecutar código o comandos no autorizados por medio de certificados diseñados cargados en el dispositivo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:10.236204Z","id":"CVE-2021-41027","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-134","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43064","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T13:15:08.073","lastModified":"2026-06-17T04:10:27.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to use the device as a proxy and reach external or protected hosts via redirection handlers."},{"lang":"es","value":"Una redirección de url a un sitio no confiable (\"open redirect\") en Fortinet FortiWeb versión 6.4.1 y 6.4.0, versión 6.3.15 y anteriores, versión 6.2.6 y anteriores permite a un atacante usar el dispositivo como proxy y llegar a hosts externos o protegidos por medio de manejadores de redirección"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:42.666205Z","id":"CVE-2021-43064","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"5F9F1235-608A-4301-904F-8CA38A153E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-168","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36190","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T14:15:09.527","lastModified":"2026-06-17T03:58:29.710","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests."},{"lang":"es","value":"Un proxy o intermediario no intencionado (\"confused deputy\") en Fortinet FortiWeb versión 6.4.1 y anteriores, 6.3.15 y anteriores, permite a un atacante no autenticado acceder a hosts protegidos por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.1,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:38.578236Z","id":"CVE-2021-36190","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"C5931460-A0F1-4BED-ADEF-A48602EA747C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"5F9F1235-608A-4301-904F-8CA38A153E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"96B929BB-7B7A-40D2-AB13-D4FDD41FD159"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A3C5370-3453-4F07-B551-7E36F815578C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"415AF153-2A59-488B-A78B-D98B7F39B5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-123","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43063","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T14:15:09.587","lastModified":"2026-06-17T04:10:27.537","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP GET requests to the login webpage."},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de la página web (\"Cross-site Scripting\") en Fortinet FortiWeb versiones 6.4.1 y 6.4.0, versiones 6.3.15 y anteriores, versiones 6.2.6 y anteriores permite a un atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP GET diseñadas a la página web de inicio de sesión"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:37.203167Z","id":"CVE-2021-43063","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"5F9F1235-608A-4301-904F-8CA38A153E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-122","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36188","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T17:15:10.877","lastModified":"2026-06-17T03:58:29.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted GET parameters in requests to login and error handlers"},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de la página web (\"Cross-site Scripting\") en Fortinet FortiWeb versión 6.4.1 y anteriores, 6.3.15 y anteriores, permite a un atacante ejecutar código o comandos no autorizados por medio de parámetros GET diseñados en peticiones de inicio de sesión y manejadores de errores"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:36.108876Z","id":"CVE-2021-36188","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.2.5","matchCriteriaId":"FCB9E28C-5341-44D1-A311-9D9C6EF9CDF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.16","matchCriteriaId":"C0486411-DC71-4C02-8973-B91930A439A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"C97F7E3F-4747-46AA-8D2C-5D7C363CDB14"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-118","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41013","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T17:15:10.987","lastModified":"2026-06-17T04:07:44.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may allow an unauthorized and unauthenticated user to access the Log reports via their URLs."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado [CWE-284] en FortiWeb versiones 6.4.1 y anteriores y 6.3.15 y anteriores, en la sección Report Browse de Log &amp; Report puede permitir a un usuario no autorizado y no autenticado acceder a los informes de Log a través de sus URLs"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:16:02.380707Z","id":"CVE-2021-41013","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-138","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41021","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T18:15:18.547","lastModified":"2026-06-17T04:07:45.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command."},{"lang":"es","value":"Una vulnerabilidad de escalada de privilegios en FortiNAC versiones 8.8.8 y anteriores y 9.1.2 y anteriores, puede permitir a un usuario administrador escalar los privilegios a root por medio del comando sudo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiNAC","versions":[{"version":"FortiNAC 9.1.2, 9.1.1, 9.1.0, 8.8.8, 8.8.7, 8.8.6, 8.8.5, 8.8.4, 8.8.3, 8.8.2, 8.8.1, 8.8.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:08.920154Z","id":"CVE-2021-41021","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.8.0:*:*:*:*:*:*:*","matchCriteriaId":"326CEB4E-22A6-4E74-A0E6-08429A089613"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"3181DD7D-5873-4A4A-B403-42B84355C19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"F55C207C-36D0-4D79-B882-A611F9FE6B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.8.3:*:*:*:*:*:*:*","matchCriteriaId":"4891E307-0B86-43B6-B51A-46471F86AED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.8.4:*:*:*:*:*:*:*","matchCriteriaId":"3DDDD7B7-DB6D-4A94-959C-F0DAE13C9D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F90AB49E-49FC-4A1C-A45C-8165EEA4746F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.8.6:*:*:*:*:*:*:*","matchCriteriaId":"74BFA5FC-A6FB-486C-BED1-4388182A388F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2064F9E5-95BB-4A11-AC23-E91C6A0A97EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.8.8:*:*:*:*:*:*:*","matchCriteriaId":"71EA8614-B871-43DD-B246-D3CD26D204CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"20A402E2-FD83-47B8-A5DF-828A3661162E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E3B0E5D6-7B79-4081-8230-0C02490A5CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"17B0A606-5595-457C-8CC7-BA3C856A223B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-182","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41030","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T18:15:18.613","lastModified":"2026-06-17T04:07:46.527","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages."},{"lang":"es","value":"Una vulnerabilidad de omisión de autenticación por captura-repetición [CWE-294] en FortiClient EMS versiones 7.0.1 y anteriores y versiones 6.4.4 y anteriores, puede permitir a un atacante no autenticado hacerse pasar por un usuario existente al interceptar y reusar mensajes de autenticación SAML válidos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientEMS","versions":[{"version":"FortiClientEMS 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:34.798422Z","id":"CVE-2021-41030","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-294"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"9C331B17-F3B4-42C1-8050-F35414C5686C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.4","matchCriteriaId":"625EF8A7-1E40-4C70-866D-1638AE4C7BB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C448C03-C45D-4348-BE21-352FFCA4DEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"52CF0873-A8E2-44CB-805E-C028A9A458C3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-192","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36173","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T19:15:09.787","lastModified":"2026-06-17T03:58:27.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted installation images."},{"lang":"es","value":"Un desbordamiento de búfer en la región heap de la memoria en la función firmware signature verification de FortiOS versiones 7.0.1, 7.0.0, 6.4.0 hasta 6.4.6, 6.2.0 hasta 6.2.9 y 6.0.0 hasta 6.0.13, puede permitir a un atacante ejecutar código arbitrario por medio de imágenes de instalación especialmente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.0 through 6.0.13","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:07.677380Z","id":"CVE-2021-36173","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.13","matchCriteriaId":"A6EF01D9-50FB-4300-87FB-132649A9AC51"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C4C0308D-8E52-456B-BFC2-62D4C1E9BDC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"88D6903E-70D0-4D63-BC68-BA37EE91BCB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FBDFDF02-2136-4DE0-A19B-FE3654ED90A4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-1100e:-:*:*:*:*:*:*:*","matchCriteriaId":"58F428EE-70C1-440F-B16D-45D44A54FB9D"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-200f:-:*:*:*:*:*:*:*","matchCriteriaId":"A07781B7-E990-4BF2-A828-441D556FF2DC"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-2600f:-:*:*:*:*:*:*:*","matchCriteriaId":"4039DD9E-DAB4-45A4-90A7-50D345038CB9"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-3500f:-:*:*:*:*:*:*:*","matchCriteriaId":"A1FD4947-6A13-4C8D-B22C-96D96ACB2363"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-400e:-:*:*:*:*:*:*:*","matchCriteriaId":"FB3F963E-1CFE-4C7C-B44B-AF100592002E"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-600e:-:*:*:*:*:*:*:*","matchCriteriaId":"F034C1C3-E8D1-4426-BC5E-A6D25E31B497"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_1800f:-:*:*:*:*:*:*:*","matchCriteriaId":"76792D6F-B647-43A8-8A60-17BE35824BF7"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_2200e:-:*:*:*:*:*:*:*","matchCriteriaId":"0B2A9D43-348B-45DB-94F7-825B29141F09"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_3300e:-:*:*:*:*:*:*:*","matchCriteriaId":"0CCCA9CD-2B75-46AF-989C-C300CB53358E"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_3600e:-:*:*:*:*:*:*:*","matchCriteriaId":"5015D2E8-8482-467A-96F4-65CBF0AFAC6E"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_40f:-:*:*:*:*:*:*:*","matchCriteriaId":"96C31DB1-CEBD-4796-9CF1-5D9D000A5A9A"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_60f:-:*:*:*:*:*:*:*","matchCriteriaId":"2D32F0C5-2949-48B6-B9DD-F070DE11C803"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_7121f:-:*:*:*:*:*:*:*","matchCriteriaId":"E1663D59-D804-44A4-B768-93BDF60F8DEA"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-115","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36195","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T19:15:09.837","lastModified":"2026-06-17T03:58:30.467","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted command arguments."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de comandos en el intérprete de línea de comandos de FortiWeb versiones 6.4.1, 6.4.0, 6.3.0 hasta 6.3.15, 6.2.0 hasta 6.2.6, y 6.1.0 hasta 6.1.2, pueden permitir a un atacante autenticado ejecutar comandos arbitrarios en el shell del sistema subyacente por medio de argumentos de comando especialmente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:33.516797Z","id":"CVE-2021-36195","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.5","matchCriteriaId":"60265BD0-4C66-43FF-898B-9433B4D4B0F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"96B929BB-7B7A-40D2-AB13-D4FDD41FD159"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A3C5370-3453-4F07-B551-7E36F815578C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"415AF153-2A59-488B-A78B-D98B7F39B5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-157","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41017","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T19:15:09.900","lastModified":"2026-06-17T04:07:45.063","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Múltiples vulnerabilidades de desbordamiento de búfer en la región heap de la memoria en algunos controladores de la API web de FortiWeb versiones 6.4.1, 6.4.0 y 6.3.0 hasta 6.3.15, pueden permitir a un atacante remoto autenticado ejecutar código o comandos arbitrarios por medio de peticiones HTTP específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.0 through 6.3.15","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:06.262312Z","id":"CVE-2021-41017","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-160","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41025","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-08T19:15:09.957","lastModified":"2026-06-17T04:07:45.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 thorugh 6.0.7, including an instance of concurrent execution using shared resource with improper synchronization and one of authentication bypass by capture-replay, may allow a remote unauthenticated attacker to circumvent the authentication process and authenticate as a legitimate cluster peer."},{"lang":"es","value":"Múltiples vulnerabilidades en el mecanismo de autenticación de confd en las versiones 6.4.1, 6.4.0, 6.3.0 hasta 6.3.15, 6.2.0 hasta 6.2.6, 6.1.0 hasta 6.1.2, 6.0.0 hasta 6.0. 7, incluyendo una instancia de ejecución concurrente usando un recurso compartido con una sincronización no adecuada y una de omisión de autenticación por captura-repetición, puede permitir a un atacante remoto no autenticado omitir el proceso de autenticación y autenticarse como un peer legítimo del cluster"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 thorugh 6.0.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:16:00.468141Z","id":"CVE-2021-41025","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"C5931460-A0F1-4BED-ADEF-A48602EA747C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"5F9F1235-608A-4301-904F-8CA38A153E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"96B929BB-7B7A-40D2-AB13-D4FDD41FD159"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1A3C5370-3453-4F07-B551-7E36F815578C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"415AF153-2A59-488B-A78B-D98B7F39B5AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6775BE1F-184A-45D2-9D8D-AA8F40227988"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-130","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36189","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-09T09:15:06.867","lastModified":"2026-06-17T03:58:29.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data"},{"lang":"es","value":"Una falta de encriptación de datos confidenciales en Fortinet FortiClientEMS versión 7.0.1 y anteriores, versión 6.4.4 y anteriores permite a un atacante la divulgación de información por medio de la inspección de los datos descifrados del navegador"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientEMS","versions":[{"version":"FortiClientEMS 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":4.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:29.994689Z","id":"CVE-2021-36189","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-311"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.4","matchCriteriaId":"625EF8A7-1E40-4C70-866D-1638AE4C7BB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:6.4.6:*:*:*:*:*:*:*","matchCriteriaId":"6560F87B-6C45-4EF2-99C5-7F8F79FD60FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C448C03-C45D-4348-BE21-352FFCA4DEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"52CF0873-A8E2-44CB-805E-C028A9A458C3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-140","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36194","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-09T09:15:07.020","lastModified":"2026-06-17T03:58:30.347","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted requests."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en los controladores de la API de FortiWeb versiones 6.4.1, 6.4.0 y 6.3.0 hasta 6.3.15, pueden permitir a un atacante autenticado lograr la ejecución de código arbitrario por medio de peticiones especialmente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:04.828107Z","id":"CVE-2021-36194","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.15","matchCriteriaId":"F59449EE-C44E-4EE7-80DC-5194A9B5B4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-152","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43204","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-09T09:15:07.080","lastModified":"2026-06-17T04:10:38.327","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.2.9 and below, version 6.0.10 and below allows attacker to cause a complete denial of service of its components via changes of directory access permissions."},{"lang":"es","value":"Un control inapropiado de un recurso a lo largo de su vida en Fortinet FortiClientWindows versión 6.4.1 y 6.4.0, versión 6.2.9 y anteriores, versión 6.0.10 y anteriores, permite a un atacante causar una denegación de servicio completa de sus componentes por medio de cambios en los permisos de acceso al directorio"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientWindows","versions":[{"version":"FortiClientWindows 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.6, 5.6.5, 5.6.4, 5.6.3, 5.6.2, 5.6.1, 5.6.0, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.0.11, 5.0.10, 5.0.9, 5.0.8, 5.0.7, 5.0.6, 5.0.5, 5.0.4, 5.0.3, 5.0.2, 5.0.1, 5.0.0, 4.3.5, 4.3.4, 4.3.3, 4.3.2, 4.3.1, 4.3.0, 4.2.7, 4.2.6, 4.2.5, 4.2.4, 4.2.3, 4.2.2, 4.2.1, 4.2.0, 4.1.3, 4.1.2, 4.1.1, 4.1.0, 4.0.4, 4.0.3, 4.0.2, 4.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:31.796478Z","id":"CVE-2021-43204","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.11","matchCriteriaId":"C862F0D6-7BA9-4064-8536-D3BF549F0B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.5","matchCriteriaId":"A7941A14-836D-4016-B910-5292AA79D60D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.6","matchCriteriaId":"14570EAA-2D79-45DC-BABD-0174658C8738"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.10","matchCriteriaId":"99B02B5E-89EF-46E5-8EC4-98AC8FB5CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.0.1:*:*:*:*:windows:*:*","matchCriteriaId":"96BCEBCD-39E1-4889-BB2B-BF988A693F36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.0.2:*:*:*:*:windows:*:*","matchCriteriaId":"7969D4A9-CA2A-4D10-9530-CFCC30FACAB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.0.3:*:*:*:*:windows:*:*","matchCriteriaId":"E1F57C30-B25E-4849-A2EB-5C3CBEECF67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.0.4:*:*:*:*:windows:*:*","matchCriteriaId":"D4460267-4A26-4C0B-AF50-675153FC99A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.1.0:*:*:*:*:windows:*:*","matchCriteriaId":"67A07CC6-0AA4-429D-BF17-8F431254D9B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.1.1:*:*:*:*:windows:*:*","matchCriteriaId":"D331BC30-504F-4431-B329-DBD9639EAE42"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.1.2:*:*:*:*:windows:*:*","matchCriteriaId":"61398D1E-FC1A-4D1B-B202-E0E4ABD565E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.1.3:*:*:*:*:windows:*:*","matchCriteriaId":"E60E37E5-D1B9-4F46-AFCC-2D8B124CA741"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.2.0:*:*:*:*:windows:*:*","matchCriteriaId":"365988CE-3AAC-43CA-98B5-9CDD20672AA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.2.1:*:*:*:*:windows:*:*","matchCriteriaId":"914F0153-831A-44B3-9990-9066D46CED68"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.2.2:*:*:*:*:windows:*:*","matchCriteriaId":"81CD48E3-DC5B-4572-A63F-6D7EE9B34DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.2.3:*:*:*:*:windows:*:*","matchCriteriaId":"61576917-A85A-4509-9B7F-B9A7900C1A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.2.4:*:*:*:*:windows:*:*","matchCriteriaId":"D2700E55-B7C9-4DA9-A6E8-1662A2E9130B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.2.5:*:*:*:*:windows:*:*","matchCriteriaId":"DACFE873-F65E-40B1-B95F-E27695D9D958"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.2.6:*:*:*:*:windows:*:*","matchCriteriaId":"DEACFA3A-B144-45A4-9D59-1C0FB019D4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.2.7:*:*:*:*:windows:*:*","matchCriteriaId":"58F85212-999B-484F-8D68-D423CC612CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.3.0:*:*:*:*:windows:*:*","matchCriteriaId":"ECF43D36-58BC-40FB-9BEE-DE8F2111B183"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.3.1:*:*:*:*:windows:*:*","matchCriteriaId":"D41B7F2F-E0EC-4B1B-BA18-ABC07A52C3EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.3.2:*:*:*:*:windows:*:*","matchCriteriaId":"522F0516-82F3-42A2-9AC1-A95525F9E7A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.3.3:*:*:*:*:windows:*:*","matchCriteriaId":"6EC731B9-49B3-4844-80DB-FF4C95A7902F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.3.4:*:*:*:*:windows:*:*","matchCriteriaId":"86CF9C71-1A41-45E6-8277-B0AB3D9BB280"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:4.3.5:*:*:*:*:windows:*:*","matchCriteriaId":"27509B90-F015-4D23-A00C-6F5ABEF28E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:5.2.0:*:*:*:*:windows:*:*","matchCriteriaId":"11A531A9-AE81-49BB-977D-C6355EDE4E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:5.2.1:*:*:*:*:windows:*:*","matchCriteriaId":"AEFFEFF8-9998-44D5-B154-F2233BF3246F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:5.2.2:*:*:*:*:windows:*:*","matchCriteriaId":"3B58C558-77BC-4A90-8892-A9EC7FF841CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:5.2.3:*:*:*:*:windows:*:*","matchCriteriaId":"12D8687C-5086-4A8B-AF5D-0A5A2818685E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:5.2.4:*:*:*:*:windows:*:*","matchCriteriaId":"E10669AD-BB00-4F79-9E47-3CD0C768BB26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:5.2.5:*:*:*:*:windows:*:*","matchCriteriaId":"8D52A748-EA79-46A7-9BA3-849222A89D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:5.2.6:*:*:*:*:windows:*:*","matchCriteriaId":"267AD2B3-75DE-454F-9A9A-8C47610BAD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:6.4.0:*:*:*:*:windows:*:*","matchCriteriaId":"F6540A80-C6CF-4DF7-A815-62BCACA093D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:6.4.1:*:*:*:*:windows:*:*","matchCriteriaId":"3237811F-5AC5-49AB-A1F5-EEB04A7C049D"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-167","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36167","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-09T10:15:11.433","lastModified":"2026-06-17T03:58:27.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 and below may allow an unauthenticated attacker to bypass the webfilter control via modifying the session-id paramater."},{"lang":"es","value":"Una vulnerabilidad de autorización inapropiada [CWE-285] en FortiClient Windows versiones  7.0.0 y 6.4.6 y anteriores y 6.2.8 y anteriores, puede permitir a un atacante no autenticado omitir el control del filtro web por medio de la modificación del parámetro session-id"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientWindows","versions":[{"version":"FortiClientWindows 7.0.0, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.5,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:28.360964Z","id":"CVE-2021-36167","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"6001805D-D4FB-4071-AD9C-18B1016FA07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:6.2.7:*:*:*:*:windows:*:*","matchCriteriaId":"95838427-5BED-4478-BD19-19A05512D84A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:windows:*:*","matchCriteriaId":"43B7F057-9D03-4687-8B04-FDE3A94C3EA3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-127","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42759","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-09T10:15:11.787","lastModified":"2026-06-17T04:10:05.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands."},{"lang":"es","value":"Una violación de los principios de diseño seguro en Fortinet Meru AP versión 8.6.1 y anteriores, versión 8.5.5 y anteriores, permite al atacante ejecutar código o comandos no autorizados por medio de comandos cli diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet Meru AP","versions":[{"version":"Meru AP 8.6.1, 8.6.0, 8.5.5, 8.5.4, 8.5.3, 8.5.2, 8.5.1, 8.5.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:00.424308Z","id":"CVE-2021-42759","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:meru_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.5","matchCriteriaId":"97C8A225-4B00-4AB1-AE9D-92835C3AB826"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:meru_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.2","matchCriteriaId":"D85AB4CD-308E-4495-A137-178883D08316"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:meru:-:*:*:*:*:*:*:*","matchCriteriaId":"58239031-FE5A-4408-BC23-FB9ABEEFE127"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-004","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43065","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-09T10:15:11.847","lastModified":"2026-06-17T04:10:27.767","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data."},{"lang":"es","value":"Una asignación incorrecta de permisos para recursos críticos en Fortinet FortiNAC versión 9.2.0, versión 9.1.3 y anteriores, versión 8.8.9 y anteriores, permite al atacante conseguir mayores privilegios por medio del acceso a datos confidenciales del sistema"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiNAC","versions":[{"version":"FortiNAC 9.2.0, 9.1.3, 9.1.2, 9.1.1, 9.1.0, 8.8.9, 8.8.8, 8.8.7, 8.8.6, 8.8.5, 8.8.4, 8.8.3, 8.8.2, 8.8.1, 8.8.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:03.364281Z","id":"CVE-2021-43065","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndExcluding":"8.8.10","matchCriteriaId":"2B635677-94E0-4594-93B3-DA0A0F40540F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndExcluding":"9.1.4","matchCriteriaId":"EAD6773C-BD72-47FF-BCC6-CC057C20E796"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D6ECEB2-D111-4C78-B0B4-0094C8C57EB3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-178","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-8wx4-g5p9-348h","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-8wx4-g5p9-348h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-43068","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-09T10:15:11.897","lastModified":"2026-06-17T04:10:28.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal."},{"lang":"es","value":"Una autenticación inapropiada en Fortinet FortiAuthenticator versión 6.4.0, permite al usuario omitir el segundo factor de autenticación por medio de un portal de acceso RADIUS"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAuthenticator","versions":[{"version":"FortiAuthenticator 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:27.074002Z","id":"CVE-2021-43068","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"230C350F-283E-48C4-8D46-BE9434A2CC6E"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-212","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43071","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-09T10:15:11.953","lastModified":"2026-06-17T04:10:28.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the LogReport API controller."},{"lang":"es","value":"Un desbordamiento del búfer en la región heap de la memoria en Fortinet FortiWeb versión 6.4.1 y 6.4.0, versión 6.3.15 y anteriores, versión 6.2.6 y anteriores, permite a un atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP diseñadas al controlador de la API LogReport"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, 6.3.16, 6.3.15, 6.3.14, 6.3.13, 6.3.12, 6.3.11, 6.3.10, 6.3.9, 6.3.8, 6.3.7, 6.3.6, 6.3.5, 6.3.4, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:01.698108Z","id":"CVE-2021-43071","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"5F9F1235-608A-4301-904F-8CA38A153E88"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.16","matchCriteriaId":"AC47B157-AB53-4BA7-B591-A140F6845592"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-188","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36169","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-13T14:15:07.623","lastModified":"2026-06-17T03:58:27.267","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unauthorized code or commands via specific hex read/write operations."},{"lang":"es","value":"Una funcionalidad oculta en Fortinet FortiOS versiones 7.x anteriores a 7.0.1, FortiOS versiones 6.4.x anteriores a 6.4.7, permite al atacante ejecutar código o comandos no autorizados por medio de operaciones específicas de lectura/escritura hexadecimal"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.0.0, 6.4.6, 6.2.9","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:N","baseScore":6.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:25.834908Z","id":"CVE-2021-36169","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.14","matchCriteriaId":"AC0AFBC1-5C11-412E-9979-AF89DD26EFCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.14","matchCriteriaId":"0A857126-D7EE-4CB4-BCAA-68D6C4FEC3E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.10","matchCriteriaId":"8EE47BA6-6F1B-40E9-8FE5-5752389875DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.7","matchCriteriaId":"868E19AD-D2ED-4424-9CA1-56E07BFBC0DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-091","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41028","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-16T19:15:08.130","lastModified":"2026-06-17T04:07:46.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability [CWE-297] in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an unauthenticated and network adjacent attacker to perform a man-in-the-middle attack between the EMS and the FCT via the telemetry protocol."},{"lang":"es","value":"Una combinación de una vulnerabilidad de clave criptográfica embebida [CWE-321] en FortiClientEMS versiones 7.0.1 y anteriores, versiones 6.4.6 y anteriores, y una vulnerabilidad de comprobación de certificado inapropiado [CWE-297] en FortiClientWindows, FortiClientLinux y FortiClientMac versiones 7. 0.1 y anteriores, versiones 6.4.6 y anteriores, pueden permitir a un atacante no autenticado y adyacente a la red llevar a cabo un ataque de tipo man-in-the-middle entre el EMS y el FCT por medio del protocolo de telemetría"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientEMS, FortiClientWindows, FortiClientLinux, FortiClientMac","versions":[{"version":"FortiClientEMS 7.0.1 and below,  6.4.6 and below, FortiClientWindows, FortiClientLinux, FortiClientMac 7.0.1 and below,  6.4.6 and below.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:P/A:P","baseScore":5.4,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":5.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:57:24.536074Z","id":"CVE-2021-41028","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"},{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.9","matchCriteriaId":"D2E21BE5-4AB4-4E5A-A709-C29177DB5CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.9","matchCriteriaId":"4BF4B4CA-81E0-42EA-9EA4-66A4414345C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"2F0755CA-2961-4F74-8044-761178AB0312"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"6EE22D2E-DE73-47FE-91DE-4C4B8FDB4C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"586B3E02-6E45-49C1-9B8D-D1892C5A3331"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"B842635B-1BB3-4D92-A157-78A0CE71A659"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"6001805D-D4FB-4071-AD9C-18B1016FA07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:linux:*:*","matchCriteriaId":"F221810A-3FF0-46A6-B8A2-04ABCCF0382D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:macos:*:*","matchCriteriaId":"63E9F1CD-DF46-4AC5-9EA6-9C63C2816AD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:windows:*:*","matchCriteriaId":"43B7F057-9D03-4687-8B04-FDE3A94C3EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.1:*:*:*:*:linux:*:*","matchCriteriaId":"41FED871-2D52-41C9-A2EE-F77E63997270"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.1:*:*:*:*:macos:*:*","matchCriteriaId":"DB1D284B-AFF0-4750-8ED1-FB075C42FC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.1:*:*:*:*:windows:*:*","matchCriteriaId":"0F085864-54A6-4928-AF00-982FF6A17F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"D16D1BDE-ED3A-472B-AE5D-9A22B330AD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"EB00205D-D413-4E43-8581-6C6808AD1534"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7695C46E-650B-4480-8CCD-BBE91D9633D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9E031A53-6E46-4C38-8DA1-FC592BF0FAAD"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-075","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-44168","sourceIdentifier":"psirt@fortinet.com","published":"2022-01-04T13:15:07.957","lastModified":"2026-06-17T04:11:59.317","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A download of code without integrity check vulnerability in the \"execute restore src-vis\" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages."},{"lang":"es","value":"Una vulnerabilidad de descarga de código sin comprobación de integridad en el comando \"execute restore src-vis\" de FortiOS versiones anteriores a 7.0.3, puede permitir a un atacante local autenticado descargar archivos arbitrarios en el dispositivo por medio de paquetes de actualización especialmente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS before 7.0.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:20:19.264082Z","id":"CVE-2021-44168","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-12-10","cisaActionDue":"2021-12-24","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet FortiOS Arbitrary File Download","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-494"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-494"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.14","matchCriteriaId":"A187C6F8-D90B-4A4B-B477-8B6FF23A685A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.10","matchCriteriaId":"8EE47BA6-6F1B-40E9-8FE5-5752389875DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.8","matchCriteriaId":"986D96D1-B204-48FC-8852-BB8341941236"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"78C6A783-0633-40C2-B69D-26C0BB8D9365"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-201","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44168","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2020-15933","sourceIdentifier":"psirt@fortinet.com","published":"2022-01-05T12:15:07.977","lastModified":"2026-06-17T02:57:25.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail versions 6.2.4 and below FortiMail versions 6.4.1 and 6.4.0 allows attacker to obtain potentially sensitive software-version information via client-side resources inspection."},{"lang":"es","value":"Una exposición de información confidencial a un actor no autorizado en Fortinet FortiMail versiones 6.0.9 y anteriores, FortiMail versiones 6.2.4 y anteriores FortiMail versiones 6.4.1 y 6.4.0, permite a un atacante conseguir información potencialmente confidencial de la versión del software por medio de la inspección de recursos del lado del cliente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail 6.4.1, 6.4.0, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.4.12, 5.4.11, 5.4.10, 5.4.9, 5.4.8, 5.4.7, 5.4.6, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.3.13, 5.3.12, 5.3.10, 5.3.9, 5.3.8, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.10, 5.2.9, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.11, 5.0.10, 5.0.9, 5.0.8, 5.0.7, 5.0.6, 5.0.5, 5.0.4, 5.0.3, 5.0.2, 5.0.1, 5.0.0, 4.3.9, 4.3.8, 4.3.7, 4.3.6, 4.3.5, 4.3.4, 4.3.3, 4.3.2, 4.3.1, 4.3.0, 4.2.4, 4.2.3, 4.2.2, 4.2.1, 4.2.0, 4.1.3, 4.1.2, 4.1.1, 4.1.0, 4.0.5, 4.0.4, 4.0.3, 4.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:58.961867Z","id":"CVE-2020-15933","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.9","matchCriteriaId":"70EC95D8-FB2E-40CF-A248-806AC0F254D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4FCC28EF-A732-4B0A-8F2D-217D4C66617F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"880FCAD9-6369-4335-889D-1C66E7CCF15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9619F567-3F75-4C3F-81D8-81B328EE47A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"AE1F3783-E2EC-4D43-83C8-ABC3BB720DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"09BBE243-5A1B-4E5D-A862-B9362CFBCFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"60F5771F-D563-48A6-8A8C-FFF518AD376E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"30ACAD3B-3C0B-4549-B31D-D92D99391BAC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-105","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36177","sourceIdentifier":"psirt@fortinet.com","published":"2022-02-02T11:15:07.637","lastModified":"2026-06-17T03:58:28.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado [CWE-284] en el servicio FortiAuthenticator HA versiones 6.3.2 y anteriores, 6.2.x, 6.1.x, 6.0.x puede permitir a un atacante en la misma vlan que la interfaz de administración de HA realizar una conexión directa no autenticada a la base de datos de la FAC"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:53.181070Z","id":"CVE-2021-36177","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.3.3","matchCriteriaId":"7ABCB8E4-8E2D-44CD-96D5-DB0A5B4FE55E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-217","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41016","sourceIdentifier":"psirt@fortinet.com","published":"2022-02-02T11:15:07.777","lastModified":"2026-06-17T04:07:44.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiExtender version 7.0.1 and below, 4.2.3 and below, 4.1.7 and below allows an authenticated attacker to execute privileged shell commands via CLI commands including special characters"},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en un comando (\"command injection\") en Fortinet FortiExtender versión 7.0.1 y anteriores, versiones 4.2.3 y anteriores, versiones 4.1.7 y anteriores permite a un atacante autenticado ejecutar comandos shell privilegiados por medio de comandos CLI que incluyen caracteres especiales"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:59.113972Z","id":"CVE-2021-41016","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.1","versionEndExcluding":"4.1.8","matchCriteriaId":"C7807C22-290E-4B85-BE6A-D9766DF0B79F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.4","matchCriteriaId":"2C3857EE-C091-4B99-854A-ABA5D7600163"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"53DB5A5D-CBEB-430E-9529-65715DA8AF3E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiextender:-:*:*:*:*:*:*:*","matchCriteriaId":"A0617C1D-E321-409D-B54B-775E854A03C1"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-148","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42753","sourceIdentifier":"psirt@fortinet.com","published":"2022-02-02T11:15:07.833","lastModified":"2026-06-17T04:10:04.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.x, 6.1.x, 6.0.x, 5.9.x and 5.8.x may allow an authenticated attacker to perform an arbitrary file and directory deletion in the device filesystem."},{"lang":"es","value":"Una limitación inapropiada de un nombre de ruta a un directorio restringido (\"Path Traversal\") vulnerabilidad [CWE-22] en la interfaz de administración de FortiWeb versiones 6.4.1 y anteriores, versiones 6.3.15 y anteriores, versiones 6.2.x, 6.1.x, 6.0.x, 5.9.x y 5.8.x, puede permitir a un atacante autenticado llevar a cabo una eliminación arbitraria de archivos y directorios en el sistema de archivos del dispositivo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:C/A:C","baseScore":8.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:54.397980Z","id":"CVE-2021-42753","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.8.0","versionEndExcluding":"6.3.16","matchCriteriaId":"5D4B68A7-0AF8-424C-93FD-CD7524A37145"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"C97F7E3F-4747-46AA-8D2C-5D7C363CDB14"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-158","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43062","sourceIdentifier":"psirt@fortinet.com","published":"2022-02-02T11:15:07.887","lastModified":"2026-06-17T04:10:27.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, version 6.4.5 and below, version 6.3.7 and below, version 6.0.11 and below allows attacker to execute unauthorized code or commands via crafted HTTP GET requests to the FortiGuard URI protection service."},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de la página web (\"cross-site scripting\") en Fortinet FortiMail versiones 7.0.1 y 7.0.0, versiones 6.4.5 y anteriores, versiones 6.3.7 y anteriores, versiones 6.0.11 y anteriores, permiten a un atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP GET diseñadas al servicio de protección URI de FortiGuard"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail 7.0.1, 7.0.0, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:51.935949Z","id":"CVE-2021-43062","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.8","matchCriteriaId":"9BAEA8B7-C4D3-4C12-8EF0-77A3F0EF2A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"9ABBEADA-F0B2-4661-ADEA-4E9998564E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"48DEF492-844C-4B37-9008-51933CC9E7F2"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/166055/Fortinet-Fortimail-7.0.1-Cross-Site-Scripting.html","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-185","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/166055/Fortinet-Fortimail-7.0.1-Cross-Site-Scripting.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43073","sourceIdentifier":"psirt@fortinet.com","published":"2022-02-02T11:15:07.937","lastModified":"2026-06-17T04:10:28.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en un comando os (\"os command injection\") en Fortinet FortiWeb versiones 6.4.1 y 6.4.0, versiones 6.3.15 y anteriores, versiones 6.2.6 y anteriores, permite a un atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:57.725503Z","id":"CVE-2021-43073","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.8.0","versionEndExcluding":"6.2.7","matchCriteriaId":"4FC69DE9-BDC7-479A-B1D6-8C440CEF07A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.17","matchCriteriaId":"0B1B7CFD-96E5-40EA-9CBC-48D0255081BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"C97F7E3F-4747-46AA-8D2C-5D7C363CDB14"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-180","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36193","sourceIdentifier":"psirt@fortinet.com","published":"2022-02-02T12:15:07.977","lastModified":"2026-06-17T03:58:30.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región stack de la memoria en el intérprete de línea de comandos de FortiWeb versiones anteriores a 6.4.2, pueden permitir a un atacante autenticado lograr una ejecución de código arbitrario por medio de comandos especialmente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiFone","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThanOrEqual":"3.0.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.8:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.2","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.7","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.6","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.8","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDDoS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortiddos:5.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.7.0","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.1","versionType":"semver","status":"affected"},{"version":"5.5.0","lessThanOrEqual":"5.5.1","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.3","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.2","versionType":"semver","status":"affected"},{"version":"5.2.0","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"},{"version":"4.7.0","status":"affected"},{"version":"4.6.0","status":"affected"},{"version":"4.5.0","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDDoS-F","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortiddos-f:6.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.3.0","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.2","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDDoS-CM","defaultStatus":"unaffected","versions":[{"version":"5.5.0","lessThanOrEqual":"5.5.1","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.3","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.1","versionType":"semver","status":"affected"},{"version":"5.2.0","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"},{"version":"4.7.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"},{"version":"2.7.0","lessThanOrEqual":"2.7.7","versionType":"semver","status":"affected"},{"version":"2.6.0","lessThanOrEqual":"2.6.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortindr:1.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.5.0","lessThanOrEqual":"1.5.3","versionType":"semver","status":"affected"},{"version":"1.4.0","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:56.216120Z","id":"CVE-2021-36193","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"6.2.6","matchCriteriaId":"C5738C08-6BAE-4A23-895E-CC17152F1ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.16","matchCriteriaId":"C0486411-DC71-4C02-8973-B91930A439A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"C97F7E3F-4747-46AA-8D2C-5D7C363CDB14"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-132","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41018","sourceIdentifier":"psirt@fortinet.com","published":"2022-02-02T12:15:08.197","lastModified":"2026-06-17T04:07:45.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en un comando os (\"inyección de comando os\") en Fortinet FortiWeb versión 6.4.1 y anteriores, 6.3.15 y anteriores permite a un atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:54.999087Z","id":"CVE-2021-41018","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.7","matchCriteriaId":"919112F8-1479-45F0-BE4D-91112143D2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.16","matchCriteriaId":"C0486411-DC71-4C02-8973-B91930A439A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"C97F7E3F-4747-46AA-8D2C-5D7C363CDB14"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-166","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26092","sourceIdentifier":"psirt@fortinet.com","published":"2022-02-24T03:15:43.407","lastModified":"2026-06-17T03:42:50.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0 through 5.6.14, 6.0.0 through 6.0.12, 6.2.0 through 6.2.7, 6.4.0 through 6.4.4; and FortiProxy 1.2.0 through 1.2.9, 2.0.0 through 2.0.1 may allow a remote unauthenticated attacker to perform a reflected Cross-site Scripting (XSS) attack by sending a request to the error page with malicious GET parameters."},{"lang":"es","value":"Un fallo en el saneo de la entrada en el portal web SSL VPN de FortiOS versiones 5.2.10 hasta 5.2.15, 5.4.0 hasta 5.4.13, 5.6.0 hasta 5.6.14, 6.0.0 hasta 6.0.12, 6.2.0 hasta 6.2.7, 6.4.0 hasta 6.4.4; y FortiProxy 1. 2.0 hasta 1.2.9, 2.0.0 hasta 2.0.1, pueden permitir a un atacante remoto no autenticado llevar a cabo un ataque de tipo Cross-site Scripting (XSS) reflejado mediante el envío una petición a la página de error con parámetros GET maliciosos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS, FortiProxy","versions":[{"version":"FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0 through 5.6.14, 6.0.0 through 6.0.12, 6.2.0 through 6.2.7, 6.4.0 through 6.4.4; FortiProxy 1.2.0 through 1.2.9, 2.0.0 through 2.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:50.615447Z","id":"CVE-2021-26092","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.9","matchCriteriaId":"73F1E981-42BC-476D-B041-889BE6EF654F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E986BB97-4883-4B26-9C67-681BB4D2EFA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.10","versionEndIncluding":"5.2.15","matchCriteriaId":"C0E45929-0FEB-4C95-9DBA-F927712FBF4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.13","matchCriteriaId":"0507F264-9E8D-4F9D-AB18-0C6CA5BD69F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.14","matchCriteriaId":"AC0AFBC1-5C11-412E-9979-AF89DD26EFCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"B09D1C32-BF6B-4B27-91D4-1347EFB8ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.7","matchCriteriaId":"6EB24CA5-D2B3-4FEE-B03A-05A7A0F11964"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.4","matchCriteriaId":"5A29B9B0-C8AD-47FA-B18C-2898EBCB1295"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-199","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36166","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-01T18:15:08.240","lastModified":"2026-06-17T03:58:26.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication token by means of the observation of certain system's properties."},{"lang":"es","value":"Una vulnerabilidad de autenticación inapropiada en FortiMail versiones anteriores a 7.0.1, puede permitir a un atacante remoto adivinar eficazmente el token de autenticación de una cuenta administrativa mediante la observación de determinadas propiedades del sistema."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail before 7.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:17.953234Z","id":"CVE-2021-36166","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.12","matchCriteriaId":"012B958E-B46C-4E94-91FA-6E0083739215"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.12","matchCriteriaId":"949AE030-B3F8-496D-AB9A-8F34203C3CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.8","matchCriteriaId":"9BAEA8B7-C4D3-4C12-8EF0-77A3F0EF2A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"9ABBEADA-F0B2-4661-ADEA-4E9998564E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"15993051-6D79-4D59-B43D-EE3DA539AA18"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-028","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-36171","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-01T18:15:08.337","lastModified":"2026-06-17T03:58:27.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame."},{"lang":"es","value":"El uso de un generador de números pseudoaleatorios criptográficamente débil en la funcionalidad password reset de FortiPortal versiones anteriores a 6.0.6, puede permitir a un atacante remoto no autenticado predecir partes o la totalidad de la contraseña recién generada en un plazo determinado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiPortal","versions":[{"version":"FortiPortal before 6.0.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:53.710813Z","id":"CVE-2021-36171","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.4","matchCriteriaId":"6AE2410A-BB98-4652-98ED-18B33E52DBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.2","matchCriteriaId":"38B071DD-7C34-4EDC-9D87-EE0C32DA8256"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.4","matchCriteriaId":"638521CB-28CE-4C96-88FE-270E6E9867EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.3","matchCriteriaId":"4AE4255A-A854-4A11-8860-A558E1D77F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.2","matchCriteriaId":"6F09B0F2-D95C-478B-9AA2-CCE1D2D1E497"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndExcluding":"5.2.7","matchCriteriaId":"8C74392D-4BC1-4E95-B3A4-7E6BADE5141D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.7","matchCriteriaId":"9AD92C9F-8593-43C5-B5C1-F0F8EDE2326E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.6","matchCriteriaId":"08ECB3CD-EAA3-488F-9711-85F88B80E2F1"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-099","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-15936","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-01T19:15:08.097","lastModified":"2026-06-17T02:57:26.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and below, version 5.6.13 and below allows attacker to disclose sensitive information via SNI Client Hello TLS packets."},{"lang":"es","value":"Una comprobación de entrada inapropiada en Fortinet FortiGate versiones 6.4.3 y anteriores, versiones 6.2.5 y anteriores, versiones 6.0.11 y anteriores, versiones 5.6.13 y anteriores, permite a un atacante revelar información confidencial por medio de paquetes SNI Client Hello TLS."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.13, 5.6.12, 5.6.11, 5.6.10, 5.6.9, 5.6.8, 5.6.7, 5.6.6, 5.6.5, 5.6.4, 5.6.3, 5.6.2, 5.6.1, 5.6.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N","baseScore":2.6,"baseSeverity":"LOW","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:48.170163Z","id":"CVE-2020-15936","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.13","matchCriteriaId":"7E239D7B-8B65-4639-9390-F62C5A584B18"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"91921D15-AC8B-4303-BF4B-32FC53B9EB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.5","matchCriteriaId":"A2B9C172-F8C6-416C-ADB9-AF893FB0A78C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.3","matchCriteriaId":"FF4B21C8-D766-40AF-82F3-924210471D04"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-091","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32586","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-01T19:15:08.227","lastModified":"2026-06-17T03:53:13.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de comprobación de entrada inapropiada en las instalaciones CGI del servidor web de FortiMail versiones anteriores a 7.0.1, puede permitir a un atacante no autenticado alterar el entorno del intérprete de scripts subyacente por medio de peticiones HTTP específicamente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail before 7.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","baseScore":7.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":5.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:52.549603Z","id":"CVE-2021-32586","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.12","matchCriteriaId":"012B958E-B46C-4E94-91FA-6E0083739215"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.12","matchCriteriaId":"949AE030-B3F8-496D-AB9A-8F34203C3CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.8","matchCriteriaId":"9BAEA8B7-C4D3-4C12-8EF0-77A3F0EF2A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"9ABBEADA-F0B2-4661-ADEA-4E9998564E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"15993051-6D79-4D59-B43D-EE3DA539AA18"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-008","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43075","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-01T19:15:08.480","lastModified":"2026-06-17T04:10:28.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the alarm dashboard and controller config handlers."},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en un comando os (\"inyección de comando del sistema operativo\") en Fortinet FortiWLM versiones 8.6.2 y anteriores, versiones 8.5.2 y anteriores, versiones 8.4.2 y anteriores, versiones 8.3.2 y anteriores, permite al atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP diseñadas a manejadores del tablero de alarmas y de la configuración del controlador."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLM","versions":[{"version":"FortiWLM 8.6.2, 8.6.1, 8.6.0, 8.5.2, 8.5.1, 8.5.0, 8.4.2, 8.4.1, 8.4.0, 8.3.2, 8.3.1, 8.3.0, 8.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:51.323265Z","id":"CVE-2021-43075","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionEndIncluding":"8.3.2","matchCriteriaId":"2C156442-9A85-45E0-8380-D4B7C6865343"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndIncluding":"8.4.2","matchCriteriaId":"6C20F8E9-D7F3-41A0-AAEF-5F176E85BF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.2","matchCriteriaId":"F1790F20-7DF7-46F4-9FC6-8B074CD0ED4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.3","matchCriteriaId":"9986AB2E-6FFB-4DC1-8DE7-98B66AFD362E"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-128","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43077","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-01T19:15:08.530","lastModified":"2026-06-17T04:10:29.113","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the AP monitor handlers."},{"lang":"es","value":"Una neutralización inapropiada de elementos especiales usados en un comando sql (\"inyección sql\") en Fortinet FortiWLM versiones 8.6.2 y anteriores, versiones 8.5.2 y anteriores, versiones 8.4.2 y anteriores, versiones 8.3.2 y anteriores, permite a un atacante ejecutar código o comandos no autorizados por medio de peticiones HTTP diseñadas a los manejadores de monitorización de AP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLM","versions":[{"version":"FortiWLM 8.6.2, 8.6.1, 8.6.0, 8.5.2, 8.5.1, 8.5.0, 8.4.2, 8.4.1, 8.4.0, 8.3.2, 8.3.1, 8.3.0, 8.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:50.117957Z","id":"CVE-2021-43077","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionEndIncluding":"8.3.2","matchCriteriaId":"2C156442-9A85-45E0-8380-D4B7C6865343"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndIncluding":"8.4.2","matchCriteriaId":"6C20F8E9-D7F3-41A0-AAEF-5F176E85BF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.2","matchCriteriaId":"F1790F20-7DF7-46F4-9FC6-8B074CD0ED4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.3","matchCriteriaId":"9986AB2E-6FFB-4DC1-8DE7-98B66AFD362E"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-189","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22300","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-01T19:15:08.590","lastModified":"2026-06-17T04:28:12.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyzer version 6.0.0 through 6.0.11, FortiAnalyzer version 6.2.0 through 6.2.9, FortiAnalyzer version 6.4.0 through 6.4.7, FortiAnalyzer version 7.0.0 through 7 .0.2, FortiManager version 5.6.0 through 5.6.11, FortiManager version 6.0.0 through 6.0.11, FortiManager version 6.2.0 through 6.2.9, FortiManager version 6.4.0 through 6.4.7, FortiManager version 7.0.0 through 7.0.2 allows attacker to bypass the device policy and force the password-change action for its user."},{"lang":"es","value":"Un manejo inapropiado de permisos o privilegios insuficientes en Fortinet FortiAnalyzer versiones 5.6.0 hasta 5.6.11, FortiAnalyzer versiones 6.0.0 hasta 6.0.11, FortiAnalyzer versiones 6.2.0 hasta 6.2.9, FortiAnalyzer versiones 6.4.0 hasta 6.4.7, FortiAnalyzer versiones 7.0.0 hasta 7 .0. 2, FortiManager versiones 5.6.0 hasta 5.6.11, FortiManager versiones 6.0.0 hasta 6.0.11, FortiManager versiones 6.2.0 hasta 6.2.9, FortiManager versiones 6.4.0 hasta 6.4.7, FortiManager versiones 7.0.0 hasta 7.0.2, permite a un atacante omitir la política del dispositivo y forzar la acción de cambio de contraseña para su usuario."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager, FortiAnalyzer","versions":[{"version":"FortiManager 7.0.2, 7.0.1, 7.0.0, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.11, 5.6.10, 5.6.9, 5.6.8, 5.6.7, 5.6.6, 5.6.5, 5.6.4, 5.6.3, 5.6.2, 5.6.1, 5.6.0; FortiAnalyzer 7.0.2, 7.0.1, 7.0.0, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.11, 5.6.10, 5.6.9, 5.6.8, 5.6.7, 5.6.6, 5.6.5, 5.6.4, 5.6.3, 5.6.2, 5.6.1, 5.6.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:49.371396Z","id":"CVE-2022-22300","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-755"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.11","matchCriteriaId":"F405CC91-9EDE-43F4-ACB3-5744F0FAB7BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"54813EA4-11C3-430F-82AC-CBD542966E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"111C793F-C2E0-4042-A269-D40E1815A672"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"4FE9C581-AB9F-4044-8C62-23B5494EFD27"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"F769E92C-C005-4BC8-9F48-F2E6218FFEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.11","matchCriteriaId":"BC5BB5B9-7C51-4840-9D25-DA41C0EF16C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"FD729EF3-1665-4CE7-9FDD-450D5F79A2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"7D79F4BE-B6BB-414A-A132-D3650B2B5B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"105F23CF-6375-402E-A2ED-9827510196EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"703550D7-5800-4870-9FE7-CE4B45B12591"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-255","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-44166","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-02T10:15:07.750","lastModified":"2026-06-17T04:11:59.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to access the protected system during the 2FA procedure, even though the deny button is clicked by the legitimate user."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado [CWE-284 ] en la notificación push externa de FortiToken Mobile (Android) versiones 5.1.0 y anteriores, puede permitir a un atacante remoto que ya haya obtenido la contraseña de un usuario acceder al sistema protegido durante el procedimiento de 2FA, aunque el usuario legítimo haga clic en el botón de denegación"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiTokenAndroid","versions":[{"version":"FortiTokenAndroid 5.1.0 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:45.705370Z","id":"CVE-2021-44166","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.0.0:*:*:*:*:android:*:*","matchCriteriaId":"3955B1D6-2A19-4233-B4D9-8B4164953FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.0.1:*:*:*:*:android:*:*","matchCriteriaId":"C73200A0-7927-4BB7-BFC3-F3096A36C885"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.1.1:*:*:*:*:android:*:*","matchCriteriaId":"13450557-F714-440B-ACE4-16CB73FE0671"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.2.1:*:*:*:*:android:*:*","matchCriteriaId":"9136197A-B12B-4CAF-9E29-4C5FE449CA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.2.2:*:*:*:*:android:*:*","matchCriteriaId":"4C141581-C3A0-40AD-9653-09A807DAD6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.3.0:*:*:*:*:android:*:*","matchCriteriaId":"F15B4E41-3064-4EC5-8E7B-28E3C1F0C2D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.4.0:*:*:*:*:android:*:*","matchCriteriaId":"469E9D0A-A62D-4827-9CCC-273E8DBDF803"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.5.0:*:*:*:*:android:*:*","matchCriteriaId":"94A1FD51-E7EB-46B0-876F-FC4DBCD9F067"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:5.0.2:*:*:*:*:android:*:*","matchCriteriaId":"C7D9D6C0-3BEE-4AA7-89F0-3F403BE9899F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:5.0.3:*:*:*:*:android:*:*","matchCriteriaId":"D5AD4616-8E63-4454-B443-F25226796FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:5.1.0:*:*:*:*:android:*:*","matchCriteriaId":"A5542F78-EB6C-4F4D-BBED-60D5B411C8B7"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-210","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22301","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-02T10:15:07.983","lastModified":"2026-06-17T04:28:12.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 through 5.4.3, 5.2.0 through 5.2.1 may allow an authenticated attacker to execute unauthorized commands by running CLI commands with specifically crafted arguments."},{"lang":"es","value":"Una neutralización inapropiada de elementos especiales usados en una vulnerabilidad de comandos del Sistema Operativo [CWE-78] en la consola FortiAP-C versiones 5.4.0 hasta 5.4.3, versiones 5.2.0 hasta 5.2.1, puede permitir a un atacante autenticado ejecutar comandos no autorizados ejecutando comandos CLI con argumentos específicamente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAP-C","versions":[{"version":"FortiAP-C 5.4.0 through 5.4.3, 5.2.0 through 5.2.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:48.817912Z","id":"CVE-2022-22301","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-c:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"676F7DBB-2C19-48A5-A60E-4F9DBB5A497C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-c:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"185166B9-3F6F-4AA9-A1B6-766B26A57A41"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-c:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B4E12766-7EC9-411E-8605-4BB7D9DF86A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-c:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1B443FFA-0A62-4696-BD68-2429B81542DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-c:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"4810F7C6-8C23-4709-B69A-2BC730764103"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-c:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E0BDC597-0BC8-4033-9E07-48B0C869A8D0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-227","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22303","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-02T10:15:08.037","lastModified":"2026-06-17T04:28:12.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9 may allow a low privileged authenticated user to gain access to the FortiGate users credentials via the config conflict file."},{"lang":"es","value":"Una exposición de información confidencial del sistema a una vulnerabilidad de esfera de control no autorizada [CWE-497] en FortiManager versiones anteriores a 7.0.2, 6.4.7 y 6.2.9 puede permitir a un usuario autenticado con pocos privilegios conseguir acceso a las credenciales de los usuarios de FortiGate por medio del archivo de conflicto de configuración"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager","versions":[{"version":"FortiManager 7.0.2, 7.0.1, 7.0.0, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":2.8,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:46.875450Z","id":"CVE-2022-22303","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"7D79F4BE-B6BB-414A-A132-D3650B2B5B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"105F23CF-6375-402E-A2ED-9827510196EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"7C5772DB-7F52-479C-914D-778552395990"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-165","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43070","sourceIdentifier":"psirt@fortinet.com","published":"2022-03-02T17:15:07.887","lastModified":"2026-06-17T04:10:28.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de rutas relativas [CWE-23] en la interfaz de administración de FortiWLM versiones 8.6.2 y anteriores, versiones 8.5.2 y anteriores, versiones 8.4.2 y anteriores, versiones 8.3.3 y anteriores, versiones 8.2.2, pueden permitir a un atacante autenticado recuperar archivos arbitrarios del sistema de archivos subyacente por medio de peticiones web especialmente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWLM","versions":[{"version":"FortiWLM 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:44.266069Z","id":"CVE-2021-43070","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndIncluding":"8.3.3","matchCriteriaId":"92E5150D-C8FC-419D-96EF-F446136A923E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndIncluding":"8.4.2","matchCriteriaId":"6C20F8E9-D7F3-41A0-AAEF-5F176E85BF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.2","matchCriteriaId":"F1790F20-7DF7-46F4-9FC6-8B074CD0ED4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.2","matchCriteriaId":"18F0BB7D-4EF0-4B4A-B6B4-1FB8EAC4AE68"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A2DBECF3-69BD-4622-B0B3-1F0552CBB3E8"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-106","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-29013","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T09:15:07.977","lastModified":"2026-06-17T03:10:58.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests."},{"lang":"es","value":"Una vulnerabilidad de comprobación de entrada inapropiada en la interfaz del sniffer de FortiSandbox versiones anteriores a 3.2.2, puede permitir a un atacante autenticado detener silenciosamente el sniffer por medio de peticiones específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSandbox","versions":[{"version":"FortiSandbox before 3.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:P","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:41.625149Z","id":"CVE-2020-29013","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.4","matchCriteriaId":"0FF1C5C7-9E7C-4DBD-AF52-3B5C011E4A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3DDB3490-E30F-45CC-81B7-EFB5C1A60DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"143DD85B-4CE7-409D-B215-6069D2EF33D0"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-178","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-23441","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T09:15:08.493","lastModified":"2026-06-17T04:30:07.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors."},{"lang":"es","value":"Una vulnerabilidad de uso de clave criptográfica codificada [CWE-321] en FortiEDR versiones 5.0.2, 5.0.1, 5.0.0 y 4.0.0, puede permitir a un atacante no autenticado en la red disfrazarse y falsificar mensajes de otros recolectores"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiEDR","versions":[{"version":"FortiEDR 5.0.2, 5.0.1, 5.0.0, 4.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:16.734411Z","id":"CVE-2022-23441","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41956307-6575-410D-8F95-C9F0EB3540E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6AEF3519-19B6-4A6C-AEC2-B5DE4DAEF41B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF807BAA-4DF4-4E6E-8053-F026C3B8DCB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4D4B10B6-8623-48B1-878E-F7DA0ED464FF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-019","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-23446","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T09:15:08.550","lastModified":"2026-06-17T04:30:08.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application unresponsive via changing its root directory access permission."},{"lang":"es","value":"Un control inapropiado de un recurso a lo largo de su vida en Fortinet FortiEDR versiones 5.0.3 y anteriores, permite a un atacante hacer que toda la aplicación no responda por medio de cambiar su permiso de acceso al directorio root"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiEDR","versions":[{"version":"FortiEDR 5.0.2, 5.0.1, 5.0.0, 4.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:42.987818Z","id":"CVE-2022-23446","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41956307-6575-410D-8F95-C9F0EB3540E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6AEF3519-19B6-4A6C-AEC2-B5DE4DAEF41B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF807BAA-4DF4-4E6E-8053-F026C3B8DCB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4D4B10B6-8623-48B1-878E-F7DA0ED464FF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-052","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24009","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T10:15:07.827","lastModified":"2026-06-17T03:39:09.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 may allow an authenticated attacker to execute arbitrary commands on the underlying system's shell via specifically crafted HTTP requests."},{"lang":"es","value":"Una neutralización inapropiada de múltiples elementos especiales usados en un comando del Sistema Operativo (CWE-78) en la interfaz gráfica de usuario web de FortiWAN versiones anteriores a 4.5.9, puede permitir a un atacante autenticado ejecutar comandos arbitrarios en el shell del sistema subyacente por medio de peticiones HTTP específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWAN","versions":[{"version":"FortiWAN before 4.5.9","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:46.352049Z","id":"CVE-2021-24009","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.8","matchCriteriaId":"3ED56A95-2284-49CA-A007-633257EA0D06"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-060","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26112","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T10:15:07.883","lastModified":"2026-06-17T03:42:52.973","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests."},{"lang":"es","value":"Múltiples vulnerabilidades de desbordamiento de búfer en la región stack de la memoria [CWE-121] tanto en los demonios de red como en el intérprete de línea de comandos de FortiWAN versiones anteriores a 4.5.9, pueden permitir a un atacante no autenticado corromper potencialmente los datos de control en la memoria y ejecutar código arbitrario por medio de peticiones específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWAN","versions":[{"version":"FortiWAN before 4.5.9","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:47.571085Z","id":"CVE-2021-26112","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.8","matchCriteriaId":"3ED56A95-2284-49CA-A007-633257EA0D06"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-065","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26114","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T10:15:07.933","lastModified":"2026-06-17T03:42:53.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Múltiples vulnerabilidades de neutralización inapropiada de elementos especiales usados en un comando SQL en FortiWAN versiones anteriores a 4.5.9, pueden permitir a un atacante no autenticado ejecutar código o comandos no autorizados por medio de peticiones HTTP específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWAN","versions":[{"version":"FortiWAN before 4.5.9","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:15.473470Z","id":"CVE-2021-26114","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.8","matchCriteriaId":"3ED56A95-2284-49CA-A007-633257EA0D06"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-062","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32593","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T10:15:07.983","lastModified":"2026-06-17T03:53:14.173","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages."},{"lang":"es","value":"Un uso de una vulnerabilidad de algoritmo criptográfico rota o arriesgada [CWE-327] en el Protocolo de Túnel Dinámico de FortiWAN versiones anteriores a 4.5.9, puede permitir a un atacante remoto no autenticado descifrar y falsificar los mensajes de comunicación del protocolo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWAN","versions":[{"version":"FortiWAN before 4.5.9","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:57.552347Z","id":"CVE-2021-32593","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.8","matchCriteriaId":"3ED56A95-2284-49CA-A007-633257EA0D06"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-070","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43205","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T10:15:08.037","lastModified":"2026-06-17T04:10:38.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7.0.2 and below, 6.4.7 and below and 6.2.9 and below may allow an unauthenticated attacker to access the confighandler webserver via external binaries."},{"lang":"es","value":"Una vulnerabilidad de exposición de información confidencial a un actor no autorizado [CWE-200] en FortiClient para Linux versión 7.0.2 y anteriores, 6.4.7 y anteriores y versiones 6.2.9 y anteriores, puede permitir a un atacante no autenticado acceder al servidor web confighandler por medio de binarios externos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientLinux","versions":[{"version":"FortiClientLinux 7.0.2 and below,  6.4.7 and below, 6.2.9 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:40.508883Z","id":"CVE-2021-43205","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.4","matchCriteriaId":"ABF1709D-E2F2-4C8A-B8D4-2476CECB7A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.2.6","versionEndIncluding":"6.2.9","matchCriteriaId":"F6788BF5-B7DE-43B1-8F5E-C4C2B57DB107"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.4","matchCriteriaId":"6FA7F782-DD29-4B29-9372-C5BD842ECC5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"C2BA9490-8A6D-4D13-9C19-D31714F8F2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:6.4.7:*:*:*:*:linux:*:*","matchCriteriaId":"A48C042C-D5C8-433B-A5EE-B8CC00BB6BCC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-226","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-44169","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T10:15:08.087","lastModified":"2026-06-17T04:11:59.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below allows attacker to gain administrative privileges via placing a malicious executable inside the FortiClient installer's directory."},{"lang":"es","value":"Una inicialización incorrecta en Fortinet FortiClient (Windows) versiones 6.0.10 y anteriores, versiones 6.2.9 y anteriores, versiones 6.4.7 y anteriores, versiones 7.0.3 y anteriores, permite a un atacante obtener privilegios administrativos por medio de la colocación de un ejecutable malicioso dentro del directorio del instalador de FortiClient"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientWindows","versions":[{"version":"FortiClientWindows 7.0.2, 7.0.1, 7.0.0, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:43.753946Z","id":"CVE-2021-44169","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.10","matchCriteriaId":"99B02B5E-89EF-46E5-8EC4-98AC8FB5CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"5B8BAACF-048F-4E43-A979-F4DB09D99F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"3845E219-CBE9-4BFF-86FB-6D8C1AE70C35"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-238","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-23440","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T10:15:08.257","lastModified":"2026-06-17T04:30:07.467","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment."},{"lang":"es","value":"Una vulnerabilidad en el uso de claves criptográficas embebidas [CWE-321] en el mecanismo de registro de los recolectores FortiEDR versiones 5.0.2, 5.0.1, 5.0.0, 4.0.0 puede permitir a un atacante local deshabilitar y desinstalar los recolectores de los endpoints dentro del mismo despliegue"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiEDR","versions":[{"version":"FortiEDR 5.0.2, 5.0.1, 5.0.0, 4.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:45.077328Z","id":"CVE-2022-23440","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41956307-6575-410D-8F95-C9F0EB3540E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6AEF3519-19B6-4A6C-AEC2-B5DE4DAEF41B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FF807BAA-4DF4-4E6E-8053-F026C3B8DCB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4D4B10B6-8623-48B1-878E-F7DA0ED464FF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-018","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22127","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T16:15:07.787","lastModified":"2026-06-17T03:36:39.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated attacker to execute arbitrary code on the host operating system as root via tricking the user into connecting to a network with a malicious name."},{"lang":"es","value":"Una vulnerabilidad de comprobación de entrada inapropiada en FortiClient para Linux versiones 6.4.x anteriores a 6.4.3, FortiClient para Linux versiones 6.2.x anteriores a 6.2.9, puede permitir que un atacante no autenticado ejecute código arbitrario en el sistema operativo anfitrión como root por medio de engañar al usuario para que sea conectado a una red con un nombre malicioso"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientLinux","versions":[{"version":"FortiClientLinux 6.4.2 and below, FortiClientLinux 6.2.8 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:C/I:C/A:C","baseScore":7.9,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":5.5,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:41.143992Z","id":"CVE-2021-22127","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionEndExcluding":"6.2.9","matchCriteriaId":"8FAFCFD4-94E8-49BB-8A74-382FD4F2CA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.3","matchCriteriaId":"4E4D819D-F9F4-4E7A-8C89-8A69A1CEFC1C"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-241","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-20-241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26104","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T16:15:07.863","lastModified":"2026-06-17T03:42:52.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and below, 5.3.5 and below and 6.0.4 and below may allow a local authenticated and unprivileged user to execute arbitrary shell commands as root via specifically crafted CLI command parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de comandos en el Sistema Operativo (CWE-78) en la interfaz de línea de comandos de FortiManager versiones 6.2.7 y anteriores, 6.4.5 y anteriores y todas las versiones de 6.2.x, 6.0.x y 5.6.x, FortiAnalyzer versiones 6.2.7 y anteriores, 6.4.5 y anteriores y todas las versiones de 6. 2.x, 6.0.x y 5.6.x, y FortiPortal versiones 5.2.5 y anteriores, 5.3.5 y anteriores y 6.0.4 y anteriores, pueden permitir a un usuario local autenticado no privilegiado ejecutar comandos shell arbitrarios como root por medio de parámetros de comando CLI específicamente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager, FortiAnalyzer, FortiPortal","versions":[{"version":"FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and below, 5.3.5 and below and 6.0.4 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:42.570667Z","id":"CVE-2021-26104","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.0.11","matchCriteriaId":"66857473-23A9-411F-958E-455E2D156746"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.8","matchCriteriaId":"E0F1A4F4-3123-4032-A82A-A4E1E2DFD2EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"23A36459-01FE-4ABC-8C5B-783408B43E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.0.11","matchCriteriaId":"5EAA4A2B-B03F-4842-B87C-FEFDF648C7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.8","matchCriteriaId":"C4A894BD-7AB4-4F10-819A-4DE3F9C961CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"F3FC7F19-2794-4E8E-A93A-4031D94D2A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionEndExcluding":"5.2.6","matchCriteriaId":"C05F7D12-B00B-4B09-8B86-4464E3E5127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.3.6","matchCriteriaId":"97B4F8A2-CD69-436F-9080-323AE2ACFDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.5","matchCriteriaId":"53B6FCC7-F713-42FC-B666-7169DC7A2BEA"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-037","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-f73m-fvj3-m2pm","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-f73m-fvj3-m2pm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-26113","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T16:15:07.917","lastModified":"2026-06-17T03:42:53.083","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored."},{"lang":"es","value":"El uso de un hash unidireccional con una vulnerabilidad salt predecible [CWE-760] en FortiWAN versiones anteriores a 4.5.9, puede permitir a un atacante que haya entrado previamente en posesión del archivo de contraseñas adivinar potencialmente las contraseñas allí almacenadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWAN","versions":[{"version":"FortiWAN before 4.5.9","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:38.061338Z","id":"CVE-2021-26113","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndExcluding":"4.5.9","matchCriteriaId":"064381C9-10E0-4389-A6A9-FAED2A3AE901"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-064","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26116","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T16:15:07.967","lastModified":"2026-06-17T03:42:53.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands."},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en una vulnerabilidad de comandos del Sistema Operativo en el intérprete de línea de comandos de FortiAuthenticator versiones anteriores a 6.3.1, puede permitir a un atacante autenticado ejecutar comandos no autorizados por medio de argumentos específicamente diseñados para comandos existentes"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAuthenticator","versions":[{"version":"FortiAuthenticator before 6.3.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:39.908055Z","id":"CVE-2021-26116","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"6.3.1","matchCriteriaId":"F8B8C871-CB87-4115-B5D6-DCD2A8CB799A"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-068","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32585","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T16:15:08.017","lastModified":"2026-06-17T03:53:13.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically crafted HTTP requests."},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de páginas web [CWE-79] en FortiWAN versiones anteriores a 4.5.9 puede permitir a un atacante llevar a cabo un ataque de tipo cross-site scripting almacenado por medio de peticiones HTTP especialmente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWAN","versions":[{"version":"FortiWAN before 4.5.9","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:56.150192Z","id":"CVE-2021-32585","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndExcluding":"4.5.9","matchCriteriaId":"064381C9-10E0-4389-A6A9-FAED2A3AE901"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-078","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41026","sourceIdentifier":"psirt@fortinet.com","published":"2022-04-06T16:15:08.070","lastModified":"2026-06-17T04:07:46.077","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests."},{"lang":"es","value":"Un salto de ruta relativo en FortiWeb versiones 6.4.1, 6.4.0 y 6.3.0 hasta 6.3.15, puede permitir a un atacante autenticado recuperar archivos arbitrarios del sistema de archivos subyacente por medio de peticiones web especialmente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiWeb","versions":[{"version":"FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:39.317413Z","id":"CVE-2021-41026","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.16","matchCriteriaId":"C0486411-DC71-4C02-8973-B91930A439A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"C97F7E3F-4747-46AA-8D2C-5D7C363CDB14"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-156","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41020","sourceIdentifier":"psirt@fortinet.com","published":"2022-05-04T16:15:08.100","lastModified":"2026-06-17T04:07:45.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado [CWE-284] en FortiIsolator versiones 2.3.2 y anteriores, puede permitir que un atacante autenticado y no privilegiado regenere el certificado de CA por medio de la URL de regeneración"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiIsolator","versions":[{"version":"FortiIsolator 2.3.2, 2.3.1, 2.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:38.651678Z","id":"CVE-2021-41020","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndExcluding":"2.3.3","matchCriteriaId":"B059EA55-48AD-4CBF-A2FA-549CBA8AD689"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-040","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41032","sourceIdentifier":"psirt@fortinet.com","published":"2022-05-04T16:15:08.170","lastModified":"2026-06-17T04:07:46.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiOS versions 6.4.8 and prior and 7.0.3 and prior may allow an authenticated attacker with a restricted user profile to gather sensitive information and modify the SSL-VPN tunnel status of other VDOMs using specific CLI commands."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inapropiado [CWE-284] en FortiOS versiones 6.4.8 y anteriores y 7.0.3 y anteriores, puede permitir a un atacante autenticado con un perfil de usuario restringido recopilar información confidencial y modificar el estado del túnel SSL-VPN de otros VDOMs usando comandos CLI específicos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:36.932248Z","id":"CVE-2021-41032","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.4.9","matchCriteriaId":"63C336ED-54FA-4354-95AB-61C675BE30E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"30F10D70-1176-4119-BF1A-C2A5FCA386D4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-147","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43206","sourceIdentifier":"psirt@fortinet.com","published":"2022-05-04T16:15:08.227","lastModified":"2026-06-17T04:10:38.560","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.x and FortiProxy 7.0.0 through 7.0.1, 2.0.x allows malicious webservers to retrieve a web proxy's client username and IP via same origin HTTP requests triggering proxy-generated HTTP status codes pages."},{"lang":"es","value":"Un mensaje de error generado por el servidor que contiene información confidencial en Fortinet FortiOS 7.0.0 a 7.0.3, 6.4.0 a 6.4.8, 6.2.x, 6.0.x y FortiProxy 7.0.0 a 7.0.1, 2.0.x, permite a servidores web maliciosos recuperar el nombre de usuario y la IP del cliente de un proxy web por medio de peticiones HTTP del mismo origen que provocan páginas de códigos de estado HTTP generadas por el proxy"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS, FortiProxy","versions":[{"version":"FortiOS 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.14, 5.6.13, 5.6.12, 5.6.11, 5.6.10, 5.6.9, 5.6.8, 5.6.7, 5.6.6, 5.6.5, 5.6.4, 5.6.3, 5.6.2, 5.6.1, 5.6.0; FortiProxy 7.0.1, 7.0.0, 2.0.7, 2.0.6, 2.0.5, 2.0.4, 2.0.3, 2.0.2, 2.0.1, 2.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:35.576131Z","id":"CVE-2021-43206","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-209"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.9","matchCriteriaId":"96161EB8-2DFC-488B-B24D-80DA3B52E5B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"EFEA53FA-16E1-4CDB-933C-2F886CAB15DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.0.14","matchCriteriaId":"104926CC-BE94-41EF-98E5-F565A6EAADD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.10","matchCriteriaId":"8EE47BA6-6F1B-40E9-8FE5-5752389875DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.8","matchCriteriaId":"986D96D1-B204-48FC-8852-BB8341941236"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"30F10D70-1176-4119-BF1A-C2A5FCA386D4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-231","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-23443","sourceIdentifier":"psirt@fortinet.com","published":"2022-05-04T16:15:08.587","lastModified":"2026-06-17T04:30:08.223","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP GET requests."},{"lang":"es","value":"Un control de acceso inapropiado en Fortinet FortiSOAR versiones anteriores a 7.2.0, permite a atacantes no autenticados acceder a los datos de la API de la pasarela por medio de peticiones HTTP GET diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSOAR","versions":[{"version":"FortiSOAR 7.0.2, 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.1, 6.4.0, 6.0.0, 5.x.x","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:54.752927Z","id":"CVE-2022-23443","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.4","matchCriteriaId":"A032E20C-C28B-496B-9AD8-AC3189C3BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"956CA8C0-9FA5-47EE-BB39-207D2FA7BC1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4F0A298C-9274-4118-BF40-24D2F8FDE8F3"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-041","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-26116","sourceIdentifier":"psirt@fortinet.com","published":"2022-05-11T08:15:06.687","lastModified":"2026-06-17T04:34:42.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.2 and below may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters."},{"lang":"es","value":"Múltiples neutralizaciones inapropiadas de elementos especiales usados en comandos SQL (\"Inyección SQL\") vulnerabilidad [CWE-89] en FortiNAC versiones: 8.3.7 y anteriores, 8.5.2 y anteriores, 8.5.4, 8.6.0, 8.6.5 y anteriores, 8.7.6 y anteriores, 8.8.11 y anteriores, 9.1.5 y anteriores, 9.2.2 y anteriores, pueden permitir a un atacante autenticado ejecutar código o comandos no autorizados por medio de parámetros de cadenas específicamente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiNAC","versions":[{"version":"FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.2 and below.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:37.375269Z","id":"CVE-2022-26116","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionEndIncluding":"8.3.7","matchCriteriaId":"7D16EFEF-BB42-4D65-9167-7FE64BE426A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.2","matchCriteriaId":"9B25CF57-8771-436D-8B57-EE67D9F47570"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.2","versionEndIncluding":"8.6.5","matchCriteriaId":"81E4D361-D753-4931-83A7-9085A1B74425"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"8.7.6","matchCriteriaId":"3BD32B25-76B4-4D6E-BB5C-065070297058"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndIncluding":"8.8.11","matchCriteriaId":"46929BE3-0396-4B8A-9889-9F6CA73FAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.5","matchCriteriaId":"F8D997AC-2BA5-443F-8B71-D4FF637D02B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.2","matchCriteriaId":"27091163-9FC2-4052-A441-24BD3E020D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.5.4:*:*:*:*:*:*:*","matchCriteriaId":"374069A0-1A0D-45B7-B59D-DA3AA3855444"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C11F0FBF-985B-4053-9B16-AA7173BCCC21"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-062","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43081","sourceIdentifier":"psirt@fortinet.com","published":"2022-05-11T15:15:08.603","lastModified":"2026-06-17T04:10:29.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and below, 6.4.8 and below, 6.2.10 and below, 6.0.14 to 6.0.0. and in FortiProxy version 7.0.1 and below, 2.0.7 to 2.0.0 web filter override form may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada durante la generación de la página web [CWE-79] en FortiOS versión 7.0.3 y anteriores, 6.4.8 y anteriores, 6.2.10 y anteriores, 6.0.14 a 6.0.0. y en FortiProxy versión 7.0.1 y anteriores, 2.0.7 a 2.0.0, el formulario de anulación del filtro web puede permitir a un atacante no autenticado llevar a cabo un ataque de tipo XSS por medio de peticiones HTTP GET diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiProxy","versions":[{"version":"FortiOS version 7.0.3 and below, 6.4.8 and below, 6.2.10 and below, 6.0.14 to 6.0.0. FortiProxy version 7.0.1 and below, 2.0.7 to 2.0.0.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:32.002056Z","id":"CVE-2021-43081","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.8","matchCriteriaId":"257816EC-14E2-4F4C-BF00-0E88A25439CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"EFEA53FA-16E1-4CDB-933C-2F886CAB15DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.14","matchCriteriaId":"0A857126-D7EE-4CB4-BCAA-68D6C4FEC3E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.10","matchCriteriaId":"B4361DFE-431C-470A-9C9A-263681F125CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.9","matchCriteriaId":"08019066-27F4-4E9D-B6E5-2F74BAF065EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"30F10D70-1176-4119-BF1A-C2A5FCA386D4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-230","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-44167","sourceIdentifier":"psirt@fortinet.com","published":"2022-05-11T15:15:08.657","lastModified":"2026-06-17T04:11:59.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links."},{"lang":"es","value":"Una asignación incorrecta de permisos para la vulnerabilidad de recursos críticos [CWE-732] en FortiClient para Linux versión 6.0.8 y anteriores, 6.2.9 y anteriores, 6.4.7 y anteriores, 7.0.2 y anteriores, puede permitir a un atacante no autenticado acceder a información confidencial en archivos de registro y directorios por medio de enlaces simbólicos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientLinux","versions":[{"version":"FortiClientLinux version 6.0.8 and below, 6.2.9 and below, 6.4.7 and below, 7.0.2 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:34.008438Z","id":"CVE-2021-44167","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.8","matchCriteriaId":"5013B473-D48E-407D-9DD8-D34217D56593"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"2F0755CA-2961-4F74-8044-761178AB0312"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"8272E788-A792-4DF6-849F-B96E9728436F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"C2BA9490-8A6D-4D13-9C19-D31714F8F2F1"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-232","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43066","sourceIdentifier":"psirt@fortinet.com","published":"2022-05-11T16:15:08.770","lastModified":"2026-06-17T04:10:27.883","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer."},{"lang":"es","value":"Un control externo de nombre de archivo o ruta en Fortinet FortiClientWindows versiones 7.0.2 y anteriores, versiones 6.4.6 y anteriores, versiones 6.2.9 y anteriores, versiones 6.0.10 y anteriores, permite a un atacante escalar privilegios por medio del instalador MSI"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientWindows","versions":[{"version":"FortiClientWindows 7.0.2 7.0.1, 7.0.0, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":5.8},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:30.745830Z","id":"CVE-2021-43066","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-668"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.7","matchCriteriaId":"B4886B58-EA8B-4B1C-B27A-CDA37E64CDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"AD8E11D5-CE9E-4F3B-AE22-46EDE90E0CE3"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-154","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22306","sourceIdentifier":"psirt@fortinet.com","published":"2022-05-24T15:15:07.707","lastModified":"2026-06-17T04:28:13.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiOS 6.0.0 through 6.0.14, 6.2.0 through 6.2.10, 6.4.0 through 6.4.8, 7.0.0 may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the FortiGate and some peers such as private SDNs and external cloud platforms."},{"lang":"es","value":"Una vulnerabilidad de comprobación de certificados inapropiada [CWE-295] en FortiOS versiones 6.0.0 hasta 6.0.14, 6.2.0 hasta 6.2.10, 6.4.0 hasta 6.4.8, 7.0.0 puede permitir a un atacante adyacente a la red y no autenticado interceder en la comunicación entre FortiGate y algunos pares como SDNs privadas y plataformas de nube externas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 6.0.0 through 6.0.14, 6.2.0 through 6.2.10, 6.4.0 through 6.4.8, 7.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:M/Au:N/C:P/I:N/A:N","baseScore":2.9,"accessVector":"ADJACENT_NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":5.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:29.611090Z","id":"CVE-2022-22306","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.14","matchCriteriaId":"0A857126-D7EE-4CB4-BCAA-68D6C4FEC3E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.10","matchCriteriaId":"B4361DFE-431C-470A-9C9A-263681F125CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.9","matchCriteriaId":"08019066-27F4-4E9D-B6E5-2F74BAF065EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-239","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42755","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-18T17:15:08.413","lastModified":"2026-06-17T04:10:04.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS 7.0.2 and below, 6.4.8 and below, 6.2.10 and below, 6.0.x; FortiProxy 7.0.0, 2.0.6 and below, 1.2.x, 1.1.x, 1.0.x; FortiVoiceEnterprise 6.4.3 and below, 6.0.10 and below dhcpd daemon may allow an unauthenticated and network adjacent attacker to crash the dhcpd deamon, resulting in potential denial of service."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de enteros / wraparound [CWE-190] en FortiSwitch versiones 7.0.2 y anteriores, 6.4.9 y anteriores, 6.2.x, 6.0.x; FortiRecorder 6.4.2 y anteriores, 6.0.10 y anteriores; FortiOS 7.0.2 y anteriores, 6.4.8 y anteriores, 6.2.10 y anteriores, 6.0.x; FortiProxy 7. 0.0, 2.0.6 y anteriores, 1.2.x, 1.1.x, 1.0.x; FortiVoiceEnterprise 6.4.3 y anteriores, 6.0.10 y anteriores, dhcpd daemon puede permitir a un atacante no autenticado y adyacente a la red bloquear el dhcpd deamon, resultando en una potencial denegación de servicio"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSwitch, FortiRecorder, FortiVoiceEnterprise, FortiOS, FortiProxy","versions":[{"version":"FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS 7.0.2 and below, 6.4.8 and below, 6.2.10 and below, 6.0.x; FortiProxy 7.0.0, 2.0.6 and below, 1.2.x, 1.1.x, 1.0.x; FortiVoiceEnterprise 6.4.3 and below, 6.0.10 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.6","matchCriteriaId":"3902676A-4F5F-4C6A-A22D-DEF5EB4C0543"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D909C90B-E136-4E8E-B551-FE0369172C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"53151CA2-647D-4E40-9247-C0F4E6CB680B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"AA5C8467-1765-434E-8C11-65D3139459EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"9D9ECD0B-C46E-485B-AA41-40B9C2A90547"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"EC948E98-B48D-499B-8FD1-4B75754D2B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"668FED55-7378-487E-BE00-C33A45076F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"787C3018-40FA-415C-AF4C-D178AC4FB65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"4F35AB98-B0CD-4B04-992E-087054FCF91F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"91BF8703-2835-4895-A347-74B6E9A2FA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"C94723AB-6BBE-4F5E-9560-5ECBE3A809A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.10:*:*:*:*:*:*:*","matchCriteriaId":"E13ECB66-4AC4-4C1F-92DE-9C8788DD5379"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.11:*:*:*:*:*:*:*","matchCriteriaId":"640AC3C4-9529-4796-A2B7-E15C9AB520DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.12:*:*:*:*:*:*:*","matchCriteriaId":"11C09ED8-BEDB-4EAA-B55B-CD8F81FC74CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.13:*:*:*:*:*:*:*","matchCriteriaId":"4C31FB79-990A-403F-8479-A531837C7A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.14:*:*:*:*:*:*:*","matchCriteriaId":"BBFE82DC-E7BF-440A-A91E-00E5E4613592"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.15:*:*:*:*:*:*:*","matchCriteriaId":"67411CD4-56F9-4300-BA76-87227EE5CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.16:*:*:*:*:*:*:*","matchCriteriaId":"B7AE39C3-77E7-4BF0-AEA7-186A12DDC965"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.17:*:*:*:*:*:*:*","matchCriteriaId":"C49169A3-E7D2-4A4F-8729-551CCB33452A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.18:*:*:*:*:*:*:*","matchCriteriaId":"DFC7D4A9-9143-4055-BAA2-E6093B5ED085"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.19:*:*:*:*:*:*:*","matchCriteriaId":"280D0F29-9BBC-4F39-91D3-C26EBAEEFC4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.20:*:*:*:*:*:*:*","matchCriteriaId":"47E2D164-490D-40F2-925B-C1DF2D8905F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.21:*:*:*:*:*:*:*","matchCriteriaId":"17FA9D1F-22C3-4B66-89C9-68EF40D7B128"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.22:*:*:*:*:*:*:*","matchCriteriaId":"294F7FEE-D8A0-4B6A-ACF4-539F558BAAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.23:*:*:*:*:*:*:*","matchCriteriaId":"DE63E91F-43C9-4878-8ABF-43D6FA243B6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.24:*:*:*:*:*:*:*","matchCriteriaId":"21E72112-DD6F-4F04-B7A6-32F4A3CD652C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.25:*:*:*:*:*:*:*","matchCriteriaId":"0E46A71A-CC32-4FB9-B291-9D5213F2512B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:5.3.26:*:*:*:*:*:*:*","matchCriteriaId":"86D2A710-4758-4B86-82C8-D3DDFD082935"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C717350D-43D2-41A4-9AA9-F8EA4F5480CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4FDD21BC-FD00-4CF5-B093-1E6E9DAC9613"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C68C2594-036C-40E0-BAC5-78945229746C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2917F59F-366B-434E-9CCB-1B734396932A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D1139A66-DE22-4D31-A17F-E0A7BB4111D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DC8B76AF-0BF0-4283-90B1-48D877CF69A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DDC98DF7-9441-4F7B-9B01-36A5F63BD401"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3BA095F4-1B52-40B2-ADFE-19699C2F9E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"0BF91792-6CFF-4069-826D-E252CF9CFB84"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"41C9826B-C2E2-4A10-AC6F-CDFDBE837049"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"065C0602-8785-404F-8DD5-EC884F0AC372"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BD90D01-091F-42BC-AC76-45A582873EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9B920B4C-96A2-4341-8F19-8E08A583FEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9E9E1371-6C7B-4E98-B34A-9D03C6636CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","matchCriteriaId":"148EFCE2-1EBA-4673-98D2-86095564B727"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1668AE14-D9A4-4B7D-BC3F-75885792875A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9E0F3B9B-A06F-4A96-B2E7-9DC56E629182"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"50F8AE97-A647-4A37-8EF2-BC0BBCC8EADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"377A2F0B-2A58-4C2C-B546-3178B353484B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"20EBDFD4-45A0-47CC-817E-48E84F945402"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"8C9CDB2B-E454-4B91-9A47-615F31F1A3D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:*","matchCriteriaId":"71148DC5-10A4-48C3-AD65-967F66B6078C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:*","matchCriteriaId":"6A08987A-D448-4E46-ACB5-DF38CDBDD55B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:*","matchCriteriaId":"C0A35CD0-765F-48BD-A450-E78F213518B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:*","matchCriteriaId":"F8492560-24C1-43B6-A420-068FA9E3C496"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:*","matchCriteriaId":"EE5A3D4C-EF73-4676-A5E3-4008E7AF068D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:*","matchCriteriaId":"BE267898-AB2B-452E-B219-E0E6885DC5A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:*","matchCriteriaId":"6F223989-D906-4B0E-B54B-3D2639745837"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:*","matchCriteriaId":"E1DC5908-9E16-4D12-9F48-AE921ED0D8C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9A3BE3F8-9157-461C-8E3A-ABFA728B7DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"6C7AEE7B-AB79-462A-BEEF-6EEC558FB8C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"ADEC69D2-AA57-464C-B59E-585566CCFE34"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"521E94FB-8CB3-486B-A882-49F0ACBAC502"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*","matchCriteriaId":"F29537A6-456D-41B4-94D6-2FBA9DA3CC2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*","matchCriteriaId":"82AF3064-9B75-471E-9ADB-F55B64E453BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*","matchCriteriaId":"BC71169D-0BF3-40BC-8460-A0906B1F21F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*","matchCriteriaId":"4EC7B4D7-9F3A-43FC-930E-AC55E34A94EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*","matchCriteriaId":"48B877ED-AF81-42B1-9E88-2CD4831C6D38"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*","matchCriteriaId":"934A3FB3-97A1-4981-BB15-ABBFD273D79F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*","matchCriteriaId":"722B3D73-504E-40EB-B8FB-9F3D9A3B6DB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*","matchCriteriaId":"CBBDD272-D412-4DF5-A823-76D0C0C036C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*","matchCriteriaId":"3794902F-7A0C-4EA3-B0E3-959D118ABE47"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:*","matchCriteriaId":"7EE0B7E1-0D61-48C2-ADDB-E009ACBEE084"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:*","matchCriteriaId":"01048DC4-07BB-4689-A7E8-F0CC4F50718D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3907C1C9-EAEB-4287-82DA-06F242DEA639"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"52A0DB21-C876-4DD3-95ED-8BA0483F0BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"20A322D8-C0F0-4F31-81F5-94A12B2B88F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"ABCB90C9-976A-4D85-A84D-A6970E9C11A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"92CA4075-BA53-415E-9348-C4D3F93A683C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"363F14B5-66AC-4CA2-A11B-E1D70C307C69"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2BF39DA1-D854-4540-B410-3ECD5A83E95A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"C552DD33-EAC7-472E-9A1B-4BAF558D7DE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"59D90493-FB83-43F0-A576-C90AE7775313"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"03B8E997-3D10-48D2-8FCF-34B8A976A944"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"FA6AF1FA-A034-439A-876B-BFA1BE7DE15E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"F54D5CC0-D4F4-4F8C-8CD9-A7456ED226F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"E76E7EE1-0B07-4B56-A069-AF3B5BBCB79E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"532A62AB-40C5-4C12-8079-EABCA583DB97"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"64AC05A1-EF48-4282-BB3C-ED60E45CEEBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"72C437B7-75F8-4DDC-9670-19E2C21ACB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B468AF9F-1619-4399-A1A5-115C26FB01DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4929DC17-1B20-432D-AEDA-3B3213DC6022"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2625D2C3-A5DE-446A-B551-825B2B24EE92"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9694FC0C-408A-4892-ADD1-F36F4BBBD9EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E8C5783F-CE5B-4B8F-AF7C-C182B3ED3EAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2B8A132F-601F-4129-BFCA-3A976A711D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"90600B14-07C4-455D-9FC1-17034D91B987"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","matchCriteriaId":"953B6278-878B-4B17-8AA2-641A0604F14A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4739957D-6605-4F88-AF5F-144598270928"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AF22D78B-ED8E-42A1-8F0C-F4B52B084B60"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6E45EB-4C8C-4777-9200-08B14595A3A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9D114536-7169-4814-B011-570E3AD86A3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B28478DA-8D10-4A8E-81EA-D3DF421E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4C423AC8-4AA2-426E-8F76-7E5B3CDF82BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","matchCriteriaId":"43906627-A03E-42EA-9923-DECBAE34A818"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6E77E34E-9E3F-4022-9969-6DCEDAD1590A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","matchCriteriaId":"C2F935F9-5B6A-47C2-8F65-7A1E8BB061FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","matchCriteriaId":"91C045DF-72E9-4B33-B990-6BA25EDA7209"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FBDFDF02-2136-4DE0-A19B-FE3654ED90A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"49D51C9F-CED3-4EA0-89EB-3A63F54B10E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ADC427FF-F227-401D-8F41-8B3268D577CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73DADA28-4371-4639-AB3D-BA82F365A337"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"04DB567F-A4D9-483F-83CB-8807EEF6FB07"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6FBADF2A-2C17-4D37-8315-3B003854AE77"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"EC2673E9-3227-4EAC-9ECD-6576A575F4A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4742E76F-3030-45F6-A54B-B337D3C6705B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"056CF29E-1953-4B25-8247-E9A59F511890"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9D9CC045-D163-417F-B8AB-DC07352B81C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"962B9BAB-7414-4E6B-AF5D-F7BB0951229C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"94283031-0C2F-46B3-BAFE-69900C5DB9CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"0EA67378-E9BC-4BAE-856D-FEDB42104406"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4BEB4C-396B-44AB-8E27-357A650A5764"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"53DC5E3E-C08C-4491-9650-0781C4327225"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"484F6C79-3498-45E3-BF74-CF6075E7D31A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"843F4434-651D-4A22-80C3-77397E059A98"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.7","matchCriteriaId":"549EE910-DAC4-45B7-AE45-6B6A786CD2F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"0A13E485-2362-4AC0-9B8E-41998257B31F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"A44AA3D5-FE43-429E-B238-0954D83778A4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-155","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-44170","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-18T17:15:08.483","lastModified":"2026-06-17T04:11:59.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability [CWE-121] in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria [CWE-121] en el intérprete de línea de comandos de FortiOS versiones anteriores a 7.0.4 y FortiProxy versiones anteriores a 2.0.8, puede permitir a un atacante autenticado ejecutar código o comandos no autorizados por medio de argumentos de línea de comandos especialmente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiProxy, FortiOS","versions":[{"version":"FortiOS before 7.0.4; FortiProxy before 2.0.8","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:34.314692Z","id":"CVE-2021-44170","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.8","matchCriteriaId":"257816EC-14E2-4F4C-BF00-0E88A25439CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.14","matchCriteriaId":"0A857126-D7EE-4CB4-BCAA-68D6C4FEC3E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.11","matchCriteriaId":"38DA2E7D-2367-45B6-96FE-4BA3C0C75E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.9","matchCriteriaId":"08019066-27F4-4E9D-B6E5-2F74BAF065EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"F2E9D423-721A-482B-BA6B-52E4D8C07C58"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-179","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22304","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-18T17:15:08.667","lastModified":"2026-06-17T04:28:12.760","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent for Microsoft version 2.2 and 2.1 may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada durante la generación de la página web [CWE-79] en el Agente OWA FortiAuthenticator para Microsoft versiones 2.2 y 2.1, puede permitir a un atacante no autenticado llevar a cabo un ataque de tipo XSS por medio de peticiones HTTP GET diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAuthenticator OutlookAgent","versions":[{"version":"FortiAuthenticator Agent for Microsoft OWA version 2.2 and 2.1.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:28.381532Z","id":"CVE-2022-22304","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator_agent_for_microsoft_outlook_web_access:2.1:*:*:*:*:*:*:*","matchCriteriaId":"380C4BBB-220B-4D2D-A465-6027241F563E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator_agent_for_microsoft_outlook_web_access:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BE73BF0-3BD9-4D39-843A-4300A5F2462F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-021","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22131","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-18T18:15:08.620","lastModified":"2026-06-17T03:36:40.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper validation of certificate with host mismatch in Fortinet FortiTokenAndroid version 5.0.3 and below, Fortinet FortiTokeniOS version 5.2.0 and below, Fortinet FortiTokenWinApp version 4.0.3 and below allows attacker to retrieve information disclosed via man-in-the-middle attacks."},{"lang":"es","value":"Una comprobación incorrecta del certificado con desajuste de host en Fortinet FortiTokenAndroid versión 5.0.3 y posteriores, Fortinet FortiTokeniOS versión 5.2.0 y posteriores, Fortinet FortiTokenWinApp versión 4.0.3 y posteriores permite a un atacante recuperar información divulgada por medio de ataques de tipo man-in-the-middle"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiTokenAndroid, Fortinet FortiTokeniOS, Fortinet FortiTokenWinApp","versions":[{"version":"FortiTokenAndroid 5.0.3, 5.0.2, 4.5.0, 4.4.0, 4.3.0, 4.2.2, 4.2.1, 4.1.1, 4.0.1, 4.0.0, 3.0.4, 3.0.3, 3.0.2, 3.0.1, 3.0.0, 0.4.20, 0.4.10, FortiTokeniOS 5.2.0, 4.3.0, 4.2.0, 4.1.1, 3.0.5, 3.0.4, 3.0.3, 3.0.2, 3.0.1,  FortiTokenWinApp 4.0.3, 3.0.1, 3.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:26.926959Z","id":"CVE-2021-22131","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:0.4.10:*:*:*:*:android:*:*","matchCriteriaId":"78409CFC-A286-4BC2-A6CC-3AA0713B5B95"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:0.4.20:*:*:*:*:android:*:*","matchCriteriaId":"8607115D-DF4D-4FF8-892E-5F249E8DBD49"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.0:*:*:*:*:android:*:*","matchCriteriaId":"B9C01846-DEC3-4D82-9CF8-7A7F30E3D24E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.0:*:*:*:*:windows:*:*","matchCriteriaId":"6BE8D5E7-54A6-41F8-AEE5-4B5494F526E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.1:*:*:*:*:android:*:*","matchCriteriaId":"78A9D2E4-C44A-4E2D-8653-34125C60D36D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.1:*:*:*:*:ios:*:*","matchCriteriaId":"646EA1B7-DC75-48C9-9253-4C2A73EBAB4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.1:*:*:*:*:windows:*:*","matchCriteriaId":"EFBCBD58-7F9F-4972-B283-843A341BF3D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.2:*:*:*:*:android:*:*","matchCriteriaId":"745A6368-1A53-4CE7-9FC0-D7691841A5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.2:*:*:*:*:ios:*:*","matchCriteriaId":"66F1224F-B105-421E-B8A4-1ADB4E6D6C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.3:*:*:*:*:android:*:*","matchCriteriaId":"4F8B1290-410C-4DF8-8F32-D7606D6ED70C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.3:*:*:*:*:ios:*:*","matchCriteriaId":"F12596B9-1FD1-4DEE-B914-3BE4AB0D4954"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.4:*:*:*:*:android:*:*","matchCriteriaId":"A91D1B9C-1E80-4F1F-9C87-B2F8BBC238CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.4:*:*:*:*:ios:*:*","matchCriteriaId":"DB309927-9668-485A-B103-4B49B158F9FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:3.0.5:*:*:*:*:ios:*:*","matchCriteriaId":"E6C89656-4142-459C-A7D0-1AD56D8912DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.0.0:*:*:*:*:android:*:*","matchCriteriaId":"3955B1D6-2A19-4233-B4D9-8B4164953FC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.0.1:*:*:*:*:android:*:*","matchCriteriaId":"C73200A0-7927-4BB7-BFC3-F3096A36C885"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.0.3:*:*:*:*:windows:*:*","matchCriteriaId":"64352CBC-EE83-41E0-AA38-63F1BE9C6BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.1.0:*:*:*:*:ios:*:*","matchCriteriaId":"359238E3-41BD-4CF1-8DBE-D870AC8B957C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.1.1:*:*:*:*:android:*:*","matchCriteriaId":"13450557-F714-440B-ACE4-16CB73FE0671"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.1.1:*:*:*:*:ios:*:*","matchCriteriaId":"0FBE4948-CC88-48EA-AA98-7FFA6CB64620"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.2.0:*:*:*:*:ios:*:*","matchCriteriaId":"081B181E-C83F-43B1-B403-66F39E9F19B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.2.1:*:*:*:*:android:*:*","matchCriteriaId":"9136197A-B12B-4CAF-9E29-4C5FE449CA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.2.2:*:*:*:*:android:*:*","matchCriteriaId":"4C141581-C3A0-40AD-9653-09A807DAD6CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.3.0:*:*:*:*:android:*:*","matchCriteriaId":"F15B4E41-3064-4EC5-8E7B-28E3C1F0C2D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.3.0:*:*:*:*:ios:*:*","matchCriteriaId":"0A1901AC-78BB-488A-85E0-DF7596018CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.4.0:*:*:*:*:android:*:*","matchCriteriaId":"469E9D0A-A62D-4827-9CCC-273E8DBDF803"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:4.5.0:*:*:*:*:android:*:*","matchCriteriaId":"94A1FD51-E7EB-46B0-876F-FC4DBCD9F067"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:5.0.2:*:*:*:*:android:*:*","matchCriteriaId":"C7D9D6C0-3BEE-4AA7-89F0-3F403BE9899F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:5.0.3:*:*:*:*:android:*:*","matchCriteriaId":"D5AD4616-8E63-4454-B443-F25226796FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:5.2.0:*:*:*:*:ios:*:*","matchCriteriaId":"B395A92E-6FE3-42E1-97F3-3FB6FB1C2AF9"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-024","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-41031","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-18T18:15:08.867","lastModified":"2026-06-17T04:07:46.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta relativa [CWE-23] en FortiClient para Windows versiones 7.0.2 y anteriores, 6.4.6 y anteriores y 6.2.9 y anteriores, puede permitir a un atacante local no privilegiado escalar sus privilegios a SYSTEM por medio de la tubería con nombre responsable del servicio FortiESNAC"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientWindows","versions":[{"version":"FortiClientWindows 7.0.2, 7.0.1, 7.0.0, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:29.829418Z","id":"CVE-2021-41031","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"6001805D-D4FB-4071-AD9C-18B1016FA07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"3845E219-CBE9-4BFF-86FB-6D8C1AE70C35"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-190","source":"psirt@fortinet.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-23438","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-18T18:15:08.963","lastModified":"2026-06-17T04:30:00.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in FortiOS version 7.0.5 and prior and 6.4.9 and prior may allow an unauthenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the captive portal authentication replacement page."},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de la página web (\"Cross-site Scripting\") [CWE-79] vulnerabilidad en FortiOS versión 7.0.5 y anteriores y 6.4.9 y anteriores puede permitir a un atacante remoto no autenticado llevar a cabo un ataque de tipo cross site scripting (XSS) reflejado en la página de sustitución de autenticación del portal cautivo"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:22.182347Z","id":"CVE-2022-23438","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4.9","matchCriteriaId":"023BE7D8-97EE-43AA-9E7E-5911D6F6FD11"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"3D763E12-9F72-46DA-825B-A573AC9AA947"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-057","source":"psirt@fortinet.com","tags":["Broken Link","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-26117","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-18T18:15:09.017","lastModified":"2026-06-17T04:34:43.077","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below may allow an authenticated attacker to access the MySQL databases via the CLI."},{"lang":"es","value":"Una vulnerabilidad de contraseña vacía en el archivo de configuración [CWE-258] en FortiNAC versiones 8.3.7 y anteriores, 8.5.2 y anteriores, 8.5.4, 8.6.0, 8.6.5 y anteriores, 8.7.6 y anteriores, 8.8.11 y anteriores, 9.1.5 y anteriores, 9.2.3 y anteriores puede permitir a un atacante autenticado acceder a las bases de datos MySQL por medio de la CLI"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiNAC","versions":[{"version":"FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below, 9.2.3 and below.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:35.607605Z","id":"CVE-2022-26117","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-521"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.2","matchCriteriaId":"9B25CF57-8771-436D-8B57-EE67D9F47570"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.2","versionEndIncluding":"8.6.5","matchCriteriaId":"81E4D361-D753-4931-83A7-9085A1B74425"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"8.7.6","matchCriteriaId":"3BD32B25-76B4-4D6E-BB5C-065070297058"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndIncluding":"8.8.11","matchCriteriaId":"46929BE3-0396-4B8A-9889-9F6CA73FAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndExcluding":"9.1.6","matchCriteriaId":"5D6DF60A-302A-4602-9DA3-282177BB31DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndExcluding":"9.2.4","matchCriteriaId":"6784AAA4-8FE1-4AEA-A9F1-8489FCF78301"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"952F266E-0E48-4D69-81E0-9F813B60AC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.5.4:*:*:*:*:*:*:*","matchCriteriaId":"374069A0-1A0D-45B7-B59D-DA3AA3855444"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C11F0FBF-985B-4053-9B16-AA7173BCCC21"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-058","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-r259-5p5p-2q47","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-r259-5p5p-2q47","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-26118","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-18T18:15:09.070","lastModified":"2026-06-17T04:34:43.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 through 7.0.3 may allow a local and authenticated attacker with a restricted shell to escalate their privileges to root due to incorrect permissions of some folders and executable files on the system."},{"lang":"es","value":"Una vulnerabilidad de encadenamiento de privilegios [CWE-268] en FortiManager y FortiAnalyzer versiones 6.0.x, 6.2.x, 6.4.0 a 6.4.7, 7.0.0 a 7.0.3, puede permitir a un atacante local y autenticado con un shell restringido escalar sus privilegios a root debido a los permisos incorrectos de algunas carpetas y archivos ejecutables en el sistema"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager , FortiAnalyzer","versions":[{"version":"FortiManager 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 through 7.0.3; FortiAnalyzer 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 through 7.0.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:26.918921Z","id":"CVE-2022-26118","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"54813EA4-11C3-430F-82AC-CBD542966E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"111C793F-C2E0-4042-A269-D40E1815A672"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.8","matchCriteriaId":"0EB2DDD7-8313-4341-ACA7-6B5C7946B8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"D1BD14C2-8A18-4FCE-BC3D-AF9564793504"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"FD729EF3-1665-4CE7-9FDD-450D5F79A2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"7D79F4BE-B6BB-414A-A132-D3650B2B5B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.8","matchCriteriaId":"5CD3C694-585C-45D0-A631-2D18DA122935"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"046301E2-16A2-4245-A117-928E3A27EFEC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-056","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-26120","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-18T18:15:09.120","lastModified":"2026-06-17T04:34:43.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Múltiples vulnerabilidades de neutralización inapropiada de elementos especiales usados en un comando SQL (\"Inyección SQL\") [CWE-89] en la interfaz de administración de FortiADC versiones 7.0.0 hasta 7.0.1, 5.0.0 hasta 6.2.2, pueden permitir a un atacante autenticado ejecutar código o comandos no autorizados por medio de peticiones HTTP específicamente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiADC","versions":[{"version":"FortiADC  7.0.0 through 7.0.1, 5.0.0 through 6.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:20.829112Z","id":"CVE-2022-26120","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"6.2.3","matchCriteriaId":"F5E83FD5-3FE9-4289-A8C6-5300037F9648"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D78A58AA-5F2F-4CC3-8299-EC320E36CF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE3123F6-4360-45F8-9A90-C0D35CC73D1D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-051","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-26113","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-19T14:15:08.440","lastModified":"2026-06-17T04:34:42.527","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.10 may allow a local attacker to perform an arbitrary file write on the system."},{"lang":"es","value":"Una vulnerabilidad de ejecución con privilegios no necesarios [CWE-250] en FortiClientWindows versiones 7.0.0 hasta 7.0.3, 6.4.0 hasta 6.4.7, 6.2.0 hasta 6.2.9, 6.0.0 hasta 6.0.10, puede permitir a un atacante local llevar a cabo una escritura arbitraria de archivos en el sistema."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientWindows","versions":[{"version":"FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.10","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":7.7,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:25.514608Z","id":"CVE-2022-26113","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.10","matchCriteriaId":"99B02B5E-89EF-46E5-8EC4-98AC8FB5CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"5B8BAACF-048F-4E43-A979-F4DB09D99F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"2D462BA2-0C17-4D3D-A1C4-C95D85FCB5A4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-044","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-27483","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-19T14:15:08.500","lastModified":"2026-06-17T04:37:05.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager version 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.x and 6.0.x and FortiAnalyzer version 7.0.0 through 7.0.3, version 6.4.0 through 6.4.7, 6.2.x and 6.0.x allows attacker to execute arbitrary shell code as `root` user via `diagnose system` CLI commands."},{"lang":"es","value":"Una neutralización inapropiada de elementos especiales usados en un comando os (\"inyección de comando os\") en Fortinet FortiManager versiones 7.0.0 hasta 7.0.3, 6.4.0 hasta 6.4.7, 6.2.x y 6.0. x y FortiAnalyzer versión 7.0.0 hasta 7.0.3, versiones 6.4.0 hasta 6.4.7, 6.2.x y 6.0.x, permite a un atacante ejecutar código shell arbitrario como usuario \"root\" por medio de comandos CLI \"diagnose system\"."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiManager, FortiAnalyzer","versions":[{"version":"FortiManager 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0; FortiAnalyzer 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:28.395045Z","id":"CVE-2022-27483","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"54813EA4-11C3-430F-82AC-CBD542966E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"111C793F-C2E0-4042-A269-D40E1815A672"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"4FE9C581-AB9F-4044-8C62-23B5494EFD27"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"42D096D2-1FCB-43A6-8CF3-3226F631BAC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"FD729EF3-1665-4CE7-9FDD-450D5F79A2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"7D79F4BE-B6BB-414A-A132-D3650B2B5B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"105F23CF-6375-402E-A2ED-9827510196EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"AA4F8D67-139F-4524-88D4-B32A1580BFBE"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-049","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-29057","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-19T14:15:08.550","lastModified":"2026-06-17T04:39:31.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and 4.0.0 allows a remote authenticated attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload into the Management Console via various endpoints."},{"lang":"es","value":"Una neutralización inapropiada de la entrada durante la generación de la página web (\"cross-site scripting\") en Fortinet FortiEDR versiones 5.1.0, 5.0.0 hasta 5.0.3 Patch 6 y 4.0.0, permite a un atacante remoto autenticado llevar a cabo un ataque de tipo cross site scripting (XSS) reflejado al inyectar una carga maliciosa en la Consola de Administración por medio de varios endpoints."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiEDR","versions":[{"version":"FortiEDR 5.0.3, 5.0.2, 5.0.1, 5.0.0, 4.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:19.544160Z","id":"CVE-2022-29057","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.3","matchCriteriaId":"15226E02-68C0-4CEA-AD89-9CE94E8796C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41956307-6575-410D-8F95-C9F0EB3540E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.3:-:*:*:*:*:*:*","matchCriteriaId":"B1506107-C7C9-41DE-A87B-B495B1C1AA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"39DB2727-A437-4B1B-A3BD-08D9B2C54BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.3:patch2:*:*:*:*:*:*","matchCriteriaId":"54297892-E6AB-421A-A551-00B81D39ED4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.3:patch3:*:*:*:*:*:*","matchCriteriaId":"E6CCADD3-A014-4ED9-B5AF-1A5BB899B60B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.3:patch4:*:*:*:*:*:*","matchCriteriaId":"98FBCFBB-B257-40D0-9352-8E65D00B50CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.3:patch5:*:*:*:*:*:*","matchCriteriaId":"4DCF8441-D562-44AA-BA1F-C1198FE6B6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.0.3:patch6:*:*:*:*:*:*","matchCriteriaId":"A9D78F92-48AE-4AF6-8A18-B3E7068B93E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:5.1.0:-:*:*:*:*:*:*","matchCriteriaId":"CBA4EEE3-7B74-402D-944E-83F43A9B3353"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-077","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-29060","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-19T14:15:08.603","lastModified":"2026-06-17T04:39:31.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0 may allow an attacker who managed to retrieve the key from one device to sign JWT tokens for any device."},{"lang":"es","value":"Una vulnerabilidad en el uso de claves criptográficas embebidas [CWE-321] en la API de FortiDDoS versiones 5.5.0 hasta 5.5.1, 5.4.0 hasta 5.4.2, 5.3.0 hasta 5.3.1, 5.2.0, 5.1.0, puede permitir a un atacante que consiga recuperar la clave de un dispositivo firmar tokens JWT para cualquier dispositivo.\n"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiDDoS","versions":[{"version":"FortiDDoS 5.5.0 through 5.5.1, 5.4.0 through 5.4.2, 5.3.0 through 5.3.1, 5.2.0, 5.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:32.884471Z","id":"CVE-2022-29060","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6D099B4B-CAB5-4491-993A-38C2D3A4856F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"499D9AC5-1FB2-4891-8C43-BDAD01DD42D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"73D6C167-6EB8-43FE-8DE1-05C17FCDAE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B35C9E7A-12CD-4191-95B1-DD057C5FA330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C8AC7AEA-8028-40A7-B7AE-1CB8556C902A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0DE896C0-D7D5-4A2D-BF98-09A42EABBE9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"363742A6-DB82-472A-9C43-4D17C532110B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"AA704D20-CE0E-4412-A8DC-45F0F2299F74"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"03FC9BA3-0E36-422A-ADED-B9D91C833506"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-071","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-30301","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-19T14:15:08.770","lastModified":"2026-06-17T04:43:26.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4, 5.4.0 through 5.4.6 may allow an admin user to delete and access unauthorized files and data via specifically crafted CLI commands."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta [CWE-22] en FortiAP-U CLI versiones 6.2.0 hasta 6.2.3, 6.0.0 hasta 6.0.4, 5.4.0 hasta 5.4.6, puede permitir a un usuario administrador eliminar y acceder a archivos y datos no autorizados por medio de comandos CLI especialmente diseñados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAP-U","versions":[{"version":"FortiAP-U 6.2.0 through 6.2.3, 6.0.0 through 6.0.4, 5.4.0 through 5.4.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:31.327753Z","id":"CVE-2022-30301","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"607B4B16-A019-4DB5-A3D5-845B3C81E2CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.3","matchCriteriaId":"F971AAAE-240B-4838-ADD9-115C5A9CE73E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FFF26DC2-601F-4702-BD1E-81314AAEA2BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"3D612BAA-9A55-4C76-85F4-B7B3B8E7C310"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"97B73C52-F254-4AA6-8E03-10DEF8C0D183"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C0939528-4006-4225-A81C-08D75983AB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:5.4.6:*:*:*:*:*:*:*","matchCriteriaId":"9BF62847-C301-42F3-8BAF-9B30CD758055"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-109","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-30302","sourceIdentifier":"psirt@fortinet.com","published":"2022-07-19T14:15:08.820","lastModified":"2026-06-17T04:43:26.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1 may allow a remote and authenticated attacker to retrieve and delete arbitrary files from the underlying filesystem via specially crafted web requests."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de ruta relativo [CWE-23] en la interfaz de administración de FortiDeceptor versiones 1.0.0 hasta 3.2.x, 3.3.0 hasta 3.3.2, 4.0.0 hasta 4.0.1, pueden permitir a un atacante remoto y autenticado recuperar y eliminar archivos arbitrarios del sistema de archivos subyacente por medio de peticiones web especialmente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiDeceptor","versions":[{"version":"FortiDeceptor 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:23.572081Z","id":"CVE-2022-30302","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"3.2.2","matchCriteriaId":"14DEDA0E-12BB-4407-8B3F-F0ED56623189"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndIncluding":"3.3.2","matchCriteriaId":"9C59892D-BD8D-4BED-8729-370B52905898"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CD223A7A-54CD-4509-BB34-CD0F68F901D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"19ADEB6B-EAED-4EA3-80BB-06E194F312F8"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-213","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-23442","sourceIdentifier":"psirt@fortinet.com","published":"2022-08-03T14:15:08.473","lastModified":"2026-06-17T04:30:07.973","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4.0 through 6.4.8 and 7.0.0 through 7.0.5 may allow an authenticated attacker with a restricted user profile to gather the checksum information about the other VDOMs via CLI commands."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiOS versiones 6.2.0 a 6.2.11, 6.4.0 a 6.4.8 y 7.0.0 a 7.0.5, puede permitir a un atacante autenticado con un perfil de usuario restringido recopilar la información de la suma de comprobación sobre los otros VDOMs por medio de comandos CLI"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.11, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:17.064430Z","id":"CVE-2022-23442","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.11","matchCriteriaId":"E417AB31-3C1E-47C9-941B-36026B4379E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"BB40D8E4-7974-49A2-9D6F-37B2EF33A596"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"3D763E12-9F72-46DA-825B-A573AC9AA947"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-036","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-27484","sourceIdentifier":"psirt@fortinet.com","published":"2022-08-03T14:15:08.567","lastModified":"2026-06-17T04:37:06.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an authenticated attacker to bypass the Old Password check in the password change form via a crafted HTTP request."},{"lang":"es","value":"Un cambio de contraseña no verificado en Fortinet FortiADC versiones 6.2.0 hasta 6.2.3, 6.1.x, 6.0.x, 5.x.x, permite a un atacante autenticado omitir la comprobación de la contraseña antigua en el formulario de cambio de contraseña por medio de una petición HTTP diseñada"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiADC","versions":[{"version":"FortiADC 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.6, 6.1.5, 6.1.4, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.4, 5.0.3, 5.0.2, 5.0.1, 5.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:18.269259Z","id":"CVE-2022-27484","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"6.2.4","matchCriteriaId":"A0D8BD0D-4D80-4C42-8F1A-00D26FFF5571"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-055","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22299","sourceIdentifier":"psirt@fortinet.com","published":"2022-08-05T20:15:08.147","lastModified":"2026-06-17T04:28:12.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0 through 6.2.1, FortiProxy version 1.0.0 through 1.0.7, FortiProxy version 1.1.0 through 1.1.6, FortiProxy version 1.2.0 through 1.2.13, FortiProxy version 2.0.0 through 2.0.7, FortiProxy version 7.0.0 through 7.0.1, FortiOS version 6.0.0 through 6.0.14, FortiOS version 6.2.0 through 6.2.10, FortiOS version 6.4.0 through 6.4.8, FortiOS version 7.0.0 through 7.0.2, FortiMail version 6.4.0 through 6.4.5, FortiMail version 7.0.0 through 7.0.2 may allow an authenticated user to execute unauthorized code or commands via specially crafted command arguments."},{"lang":"es","value":"Una vulnerabilidad de cadena de formato [CWE-134] en el intérprete de línea de comandos de FortiADC versión 6.0.0 hasta 6.0.4, FortiADC versión 6.1.0 hasta 6.1.5, FortiADC versión 6.2.0 hasta 6.2.1, FortiProxy versión 1.0.0 hasta 1.0.7, FortiProxy versión 1.1.0 hasta 1.1.6, FortiProxy versión 1.2.0 hasta 1.2.13, FortiProxy versión 2.0.0 hasta 2.0.7, FortiProxy versión 7. 0.0 a 7.0.1, FortiOS versión 6.0.0 hasta 6.0.14, FortiOS versión 6.2.0 hasta 6.2.10, FortiOS versión 6.4.0 hasta 6.4.8, FortiOS versión 7.0.0 hasta 7.0.2, FortiMail versión 6.4.0 hasta 6.4.5, FortiMail versión 7.0.0 hasta 7.0.2, pueden permitir a un usuario autenticado ejecutar código o comandos no autorizados por medio de argumentos de comando especialmente diseñados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiADC, FortiProxy, FortiMail, FortiOS","versions":[{"version":"FortiADC 6.2.1, 6.2.0, 6.1.6, 6.1.5, 6.1.4, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0; FortiProxy 7.0.1, 7.0.0, 2.0.7, 2.0.6, 2.0.5, 2.0.4, 2.0.3, 2.0.2, 2.0.1, 2.0.0, 1.2.13, 1.2.12, 1.2.11, 1.2.10, 1.2.9, 1.2.8, 1.2.7, 1.2.6, 1.2.5, 1.2.4, 1.2.3, 1.2.2, 1.2.1, 1.2.0, 1.1.6, 1.1.5, 1.1.4, 1.1.3, 1.1.2, 1.1.1, 1.1.0, 1.0.7, 1.0.6, 1.0.5, 1.0.4, 1.0.3, 1.0.2, 1.0.1, 1.0.0; FortiMail 7.0.2, 7.0.1, 7.0.0, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0; FortiOS 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.6.14, 5.6.13, 5.6.12, 5.6.11, 5.6.10, 5.6.9, 5.6.8, 5.6.7, 5.6.6, 5.6.5, 5.6.4, 5.6.3, 5.6.2, 5.6.1, 5.6.0, 5.4.13, 5.4.12, 5.4.11, 5.4.10, 5.4.9, 5.4.8, 5.4.7, 5.4.6, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.2.15, 5.2.14, 5.2.13, 5.2.12, 5.2.11, 5.2.10,  ...[truncated*]","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:25.586581Z","id":"CVE-2022-22299","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FCDF60B5-A0BE-41F6-A0D5-53526A7BBAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B42E0536-4831-4A6B-AC0B-C7AE3CDE3834"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.5","matchCriteriaId":"07883AF7-1C60-43C9-8D98-CCF2B20C3B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"43038EC9-6FD3-488C-8CA3-8B4A705C3E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.7","matchCriteriaId":"1C5E8B52-3027-4A6E-82AC-052D5A320D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D909C90B-E136-4E8E-B551-FE0369172C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCB4E87-0AEC-487E-8FAD-E8F647DA21D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.14","matchCriteriaId":"5BB7E21E-A68B-44FC-8F0E-EF5926186F26"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.15","matchCriteriaId":"3F93F9C8-6064-4CED-88DF-3580C517AB51"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.13","matchCriteriaId":"0507F264-9E8D-4F9D-AB18-0C6CA5BD69F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.14","matchCriteriaId":"AC0AFBC1-5C11-412E-9979-AF89DD26EFCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.14","matchCriteriaId":"0A857126-D7EE-4CB4-BCAA-68D6C4FEC3E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.10","matchCriteriaId":"B4361DFE-431C-470A-9C9A-263681F125CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.8","matchCriteriaId":"986D96D1-B204-48FC-8852-BB8341941236"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"455773C7-5DAC-4EFF-8848-51EC77C9CB57"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-235","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43076","sourceIdentifier":"psirt@fortinet.com","published":"2022-09-06T16:15:08.333","lastModified":"2026-06-17T04:10:29.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 and below, 5.4.5 and below and 5.3.7 and below may allow a remote authenticated attacker with restricted user profile to modify the system files using the shell access."},{"lang":"es","value":"Una vulnerabilidad de administración inapropiada de privilegios [CWE-269] en FortiADC versiones 6.2.1 y anteriores, 6.1.5 y anteriores, 6.0.4 y anteriores, 5.4.5 y anteriores y 5.3.7 y anteriores, puede permitir que un atacante remoto autenticado con perfil de usuario restringido modifique los archivos del sistema usando el acceso shell.\n"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","versions":[{"version":"FortiADC 6.2.1, 6.2.0, 6.1.5, 6.1.4, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:10.744557Z","id":"CVE-2021-43076","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.7","matchCriteriaId":"A3EEDDB2-61AC-43F4-9719-3548057EF30E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.5","matchCriteriaId":"54EBC78D-0358-474F-9654-3EF9950D563B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.5","matchCriteriaId":"2E456D89-0820-4E71-A54A-16EEA8DB94D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FCDF60B5-A0BE-41F6-A0D5-53526A7BBAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B42E0536-4831-4A6B-AC0B-C7AE3CDE3834"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-215","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43080","sourceIdentifier":"psirt@fortinet.com","published":"2022-09-06T16:15:08.407","lastModified":"2026-06-17T04:10:29.257","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.2.0, version 6.4.0 through 6.4.9, version 7.0.0 through 7.0.5 may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack through the URI parameter via the Threat Feed IP address section of the Security Fabric External connectors."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada durante la generación de páginas web [CWE-79] en FortiOS versión 7.2.0, versiones 6.4.0 hasta 6.4.9, versiones 7.0.0 hasta 7.0.5, puede permitir a un atacante autenticado llevar a cabo un ataque de tipo cross-site scripting (XSS) almacenado mediante el parámetro URI por medio de la sección de dirección IP de Threat Feed de los conectores externos de Security Fabric.\n"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.2.0, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:09.640414Z","id":"CVE-2021-43080","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.10","matchCriteriaId":"6A7730E2-63AD-48F2-AE0A-6C8C9369A734"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"103E0368-0675-4511-95BF-D5CCD67BBAA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-222","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-26114","sourceIdentifier":"psirt@fortinet.com","published":"2022-09-06T16:15:08.470","lastModified":"2026-06-17T04:34:42.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated attacker to trigger a cross-site scripting (XSS) attack via sending specially crafted mail messages."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de la entrada durante la generación de la página web [CWE-79] en el Webmail de FortiMail versiones anteriores a 7.2.0 puede permitir a un atacante no autenticado desencadenar un ataque de tipo cross-site scripting (XSS) por medio del envío de mensajes de correo especialmente diseñados.\n"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail before 7.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:11.924119Z","id":"CVE-2022-26114","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.0","matchCriteriaId":"77B3B31E-4FEF-467A-A5D7-41A0C42E2309"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-045","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-27491","sourceIdentifier":"psirt@fortinet.com","published":"2022-09-06T18:15:12.693","lastModified":"2026-06-17T04:37:06.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 through 5.258 and before 4.086 allows a remote and unauthenticated attacker to trigger the sending of \"blocked page\" HTML data to an arbitrary victim via crafted TCP requests, potentially flooding the victim."},{"lang":"es","value":"Una verificación inapropiada de la fuente de un canal de comunicación en Fortinet FortiOS con motor IPS versiones 7.201 hasta 7.214, 7.001 hasta 7.113, 6.001 hasta 6.121, 5.001 hasta 5.258 y anteriores a 4.086, permite a un atacante remoto y no autenticado desencadenar el envío de datos HTML \"blocked page\" a una víctima arbitraria por medio de peticiones TCP diseñadas, inundando potencialmente a la víctima.\n"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.2.0, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":4.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:15.747870Z","id":"CVE-2022-27491","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.14","matchCriteriaId":"0A857126-D7EE-4CB4-BCAA-68D6C4FEC3E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.11","matchCriteriaId":"38DA2E7D-2367-45B6-96FE-4BA3C0C75E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.9","matchCriteriaId":"08019066-27F4-4E9D-B6E5-2F74BAF065EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"103E0368-0675-4511-95BF-D5CCD67BBAA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-073","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-29053","sourceIdentifier":"psirt@fortinet.com","published":"2022-09-06T18:15:13.007","lastModified":"2026-06-17T04:39:30.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab files in FortiOS version 7.2.0, 7.0.0 through 7.0.5 and below 7.0.0 may allow an attacker in possession of the encrypted file to decipher it."},{"lang":"es","value":"Una vulnerabilidad de pasos criptográficos faltantes [CWE-325] en las funciones que cifran los archivos keytab en FortiOS versiones 7.2.0, 7.0.0 hasta 7.0.5 y anteriores a 7.0.0, puede permitir a un atacante en posesión del archivo cifrado descifrarlo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.2.0, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:14.536091Z","id":"CVE-2022-29053","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.14","matchCriteriaId":"0A857126-D7EE-4CB4-BCAA-68D6C4FEC3E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.11","matchCriteriaId":"E417AB31-3C1E-47C9-941B-36026B4379E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"EA09A86A-A8BE-45F7-96C8-747C5DB658C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"103E0368-0675-4511-95BF-D5CCD67BBAA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-158","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-29058","sourceIdentifier":"psirt@fortinet.com","published":"2022-09-06T18:15:13.053","lastModified":"2026-06-17T04:39:31.347","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiAP 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0, FortiAP-S 6.0.0 through 6.4.7, FortiAP-W2 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0 and FortiAP-U 5.4.0 through 6.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands."},{"lang":"es","value":"Una neutralización inapropiada de elementos especiales [CWE-89] usados en una vulnerabilidad de comandos del Sistema Operativo [CWE-78] en el intérprete de línea de comandos de FortiAP versiones 6.0.0 hasta 6.4.7, 7.0.0 hasta 7.0.3, 7.2.0, FortiAP-S versiones 6.0.0 hasta 6.4. 7, FortiAP-W2 versiones 6.0.0 hasta 6.4.7, 7.0.0 hasta 7.0.3, 7.2.0 y FortiAP-U versiones 5.4.0 hasta 6.2.3, pueden permitir a un atacante autenticado ejecutar comandos no autorizados por medio de argumentos específicamente diseñados para comandos existentes.\n"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAP, FortiAP-S, FortiAP-W2, FortiAP-U","versions":[{"version":"FortiAP-U 5.4.0 through 6.2.3; FortiAP-S 6.0.0 through 6.4.7; FortiAP-W2 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0; FortiAP 6.0.0 through 6.4.7, 7.0.0 through 7.0.3, 7.2.0.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:24.249054Z","id":"CVE-2022-29058","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"3C2EBA1B-2FFE-4B09-AF81-570161EB6BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.3","versionEndExcluding":"6.4.8","matchCriteriaId":"FEF13641-3F15-4345-B777-932C827B6EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"63A8CD15-B81E-4E36-943D-FE2D822C30D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"DD3A3A70-3B13-40A4-893C-7397BB28F952"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-s:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"F80D4C66-4D1B-4759-844F-9BB508E576EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-s:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"95385DA4-11F6-487E-8D46-9DB888EE85CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-s:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.8","matchCriteriaId":"CDFD96E1-C7EF-4AF1-8E3F-1BB8EA48A401"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.6","matchCriteriaId":"3BEF86D0-7255-4054-8AA7-4AA411C5FE32"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"607B4B16-A019-4DB5-A3D5-845B3C81E2CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.4","matchCriteriaId":"F681257D-8CBE-4B23-9B38-7491876EB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"F71CA9D4-236C-4D96-BBA5-24A880BB347D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"96495773-F770-4F9C-B760-CD03CE1FDC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.8","matchCriteriaId":"0BA6B411-9438-487B-891E-079C8FB7ECD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"76F6BD2D-AC3B-4863-A536-D30D87307132"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"21B77DBC-6B9F-4EF0-847C-D2BDE123DDE4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-163","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-29062","sourceIdentifier":"psirt@fortinet.com","published":"2022-09-06T18:15:13.100","lastModified":"2026-06-17T04:39:31.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to write to the underlying filesystem with nginx permissions via crafted HTTP requests."},{"lang":"es","value":"Múltiples vulnerabilidades de salto de ruta relativo [CWE-23] en Fortinet FortiSOAR versiones anteriores a 7.2.1 permiten a un atacante autenticado escribir en el sistema de archivos subyacente con permisos de nginx por medio de peticiones HTTP diseñadas.\n"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSOAR","versions":[{"version":"FortiSOAR 7.2.0, 7.0.2, 7.0.1, 7.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:13.250066Z","id":"CVE-2022-29062","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"8CA1F324-500B-4F7F-A952-E1B1A190B078"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6445F49A-DBBD-4CED-9A5F-118628EB5F2C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-154","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-30298","sourceIdentifier":"psirt@fortinet.com","published":"2022-09-06T18:15:15.393","lastModified":"2026-06-17T04:43:26.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper privilege management vulnerability [CWE-269] in Fortinet FortiSOAR before 7.2.1 allows a GUI user who has already found a way to modify system files (via another, unrelated and hypothetical exploit) to execute arbitrary Python commands as root."},{"lang":"es","value":"Una vulnerabilidad de administración de privilegios inapropiada [CWE-269] en Fortinet FortiSOAR versiones anteriores a 7.2.1, permite a un usuario de la Interfaz Gráfica de Usuario que ya ha encontrado la forma de modificar los archivos del sistema (por medio de otra explotación no relacionado e hipotético) ejecutar comandos arbitrarios de Python como root.\n"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSOAR","versions":[{"version":"FortiSOAR 7.2.0, 7.0.2, 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.1, 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:23.194080Z","id":"CVE-2022-30298","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.4","matchCriteriaId":"A032E20C-C28B-496B-9AD8-AC3189C3BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"8CA1F324-500B-4F7F-A952-E1B1A190B078"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6445F49A-DBBD-4CED-9A5F-118628EB5F2C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-152","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-35847","sourceIdentifier":"psirt@fortinet.com","published":"2022-09-06T18:15:15.763","lastModified":"2026-06-17T04:52:24.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de los elementos especiales usados en el motor de plantillas [CWE-1336] en la interfaz de administración de FortiSOAR versiones 7.2.0, 7.0.0 hasta 7.0.3, 6.4.0 hasta 6.4.4 puede permitir a un atacante remoto y autenticado ejecutar código arbitrario por medio de una carga útil diseñada.\n"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSOAR","versions":[{"version":"FortiSOAR 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:08.444271Z","id":"CVE-2022-35847","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.4","matchCriteriaId":"A032E20C-C28B-496B-9AD8-AC3189C3BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"718E50CF-64BB-4ACC-8DEA-35234BB4213F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6445F49A-DBBD-4CED-9A5F-118628EB5F2C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-306","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-29061","sourceIdentifier":"psirt@fortinet.com","published":"2022-09-09T07:15:07.313","lastModified":"2026-06-17T04:39:31.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP GET requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización inapropiada de los elementos especiales usados en un comando OS (\"Inyección de comandos del Sistema Operativo\") [CWE-78] en Fortinet FortiSOAR versiones anteriores a 7.2.1, permite a un atacante autenticado ejecutar código o comandos no autorizados por medio de peticiones HTTP GET diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSOAR","versions":[{"version":"FortiSOAR 7.2.0, 7.0.2, 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:21.963099Z","id":"CVE-2022-29061","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndIncluding":"6.4.4","matchCriteriaId":"88BAA092-9E26-4A9B-9A24-31E6F78D1C80"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"8CA1F324-500B-4F7F-A952-E1B1A190B078"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6445F49A-DBBD-4CED-9A5F-118628EB5F2C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-156","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-44171","sourceIdentifier":"psirt@fortinet.com","published":"2022-10-10T14:15:09.650","lastModified":"2026-06-17T04:11:59.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiOS version 6.0.0 through 6.0.14, FortiOS version 6.2.0 through 6.2.10, FortiOS version 6.4.0 through 6.4.8, FortiOS version 7.0.0 through 7.0.3 allows attacker to execute privileged commands on a linked FortiSwitch via diagnostic CLI commands."},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en un comando os (\"inyección de comando de os\") en Fortinet FortiOS versión 6.0.0 hasta 6.0.14, FortiOS versión 6.2.0 hasta 6.2.10, FortiOS versión 6.4.0 hasta 6.4.8, FortiOS versión 7.0.0 hasta 7.0.3, permite a un atacante ejecutar comandos privilegiados en un FortiSwitch vinculado por medio de comandos CLI de diagnóstico"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:20.727785Z","id":"CVE-2021-44171","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.14","matchCriteriaId":"0A857126-D7EE-4CB4-BCAA-68D6C4FEC3E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.10","matchCriteriaId":"B4361DFE-431C-470A-9C9A-263681F125CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"BB40D8E4-7974-49A2-9D6F-37B2EF33A596"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"AB0E6170-82F7-4A63-95B7-9D02E27B6867"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-242","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-26121","sourceIdentifier":"psirt@fortinet.com","published":"2022-10-10T14:15:09.727","lastModified":"2026-06-17T04:34:43.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote attacker to access report template images via referencing the name in the URL path."},{"lang":"es","value":"Una vulnerabilidad de exposición de recursos a una esfera incorrecta [CWE-668] en FortiAnalyzer y FortiManager GUI versiones 7.0.0 hasta 7.0.3, 6.4.0 hasta 6.4.8, 6.2.0 hasta 6.2.9, 6.0.0 hasta 6.0.11, 5.6.0 hasta 5.6.11, puede permitir a un atacante no autenticado y remoto acceder a imágenes de plantillas de informes por medio de la referencia al nombre en la ruta URL"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:07.058057Z","id":"CVE-2022-26121","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-668"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartExcluding":"5.6.0","versionEndIncluding":"5.6.11","matchCriteriaId":"AE73DF2C-BD72-4232-8AAB-07563E97E822"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartExcluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"7D5C7EA7-C767-47CB-BC63-227D6BC58551"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartExcluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"E13E62F4-F12E-40F1-9917-E6D56D675140"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartExcluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"2D0C15F4-C878-485C-944C-F0B4FD5938E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartExcluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"DE1CDF02-9BC0-4043-8584-A776EEED31E9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartExcluding":"5.6.0","versionEndIncluding":"5.6.11","matchCriteriaId":"3368EFDE-DF3B-434B-BFF7-505516DBE73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartExcluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"CC647980-DBC1-496A-89EE-2CFDA64ED191"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartExcluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"8EBEFB74-4484-47B6-9CEC-CA96E6D297AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartExcluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"263BAEBB-AF6D-4717-A6A4-E6DB6F918D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartExcluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"52730F17-9880-4D56-BE3C-8FFA04AD4909"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-026","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-35844","sourceIdentifier":"psirt@fortinet.com","published":"2022-10-18T14:15:09.590","lastModified":"2026-06-17T04:52:23.777","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to commands of the certificate import feature."},{"lang":"es","value":"Una neutralización inapropiada de los elementos especiales usados en una vulnerabilidad de comandos del Sistema Operativo [CWE-78] en la interfaz de administración de FortiTester versiones 2.3.0 hasta 3.9.1, 4.0.0 hasta 4.2.0, 7.0.0 hasta 7.1.0, puede permitir a un atacante autenticado ejecutar comandos no autorizados por medio de argumentos específicamente diseñados para los comandos de la funcionalidad certificate import"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiTester","versions":[{"version":"FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:18.232499Z","id":"CVE-2022-35844","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndExcluding":"3.9.2","matchCriteriaId":"0A56D42B-F3B0-419F-8F1B-2826E28436BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.2.1","matchCriteriaId":"FE2EA412-DFA8-4EA8-80B1-081B994AFEDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.1.1","matchCriteriaId":"B708B54C-64C3-4793-8F81-896CFCA2AFF9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-247","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-35846","sourceIdentifier":"psirt@fortinet.com","published":"2022-10-18T14:15:09.663","lastModified":"2026-06-17T04:52:23.997","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to guess the credentials of an admin user via a brute force attack."},{"lang":"es","value":"Una vulnerabilidad de restricción inapropiada de intentos de autenticación excesivos [CWE-307] en el puerto Telnet de FortiTester versiones 2.3.0 hasta 3.9.1, 4.0.0 hasta 4.2.0, 7.0.0 hasta 7.1.0, puede permitir a un atacante no autenticado adivinar las credenciales de un usuario administrador por medio de un ataque de fuerza bruta"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiTester","versions":[{"version":"FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:16.897068Z","id":"CVE-2022-35846","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndExcluding":"3.9.2","matchCriteriaId":"0A56D42B-F3B0-419F-8F1B-2826E28436BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.2.1","matchCriteriaId":"FE2EA412-DFA8-4EA8-80B1-081B994AFEDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.1.1","matchCriteriaId":"B708B54C-64C3-4793-8F81-896CFCA2AFF9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-244","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-40684","sourceIdentifier":"psirt@fortinet.com","published":"2022-10-18T14:15:09.747","lastModified":"2026-08-06T05:16:37.827","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una omisión de autenticación usando una ruta o canal alternativo [CWE-288] en Fortinet FortiOS versión versiones 7.2.0 hasta 7.2.1 y 7.0.0 hasta 7.0.6, FortiProxy versión 7.2.0 y versiones 7.0.0 hasta 7.0.6 y FortiSwitchManager versión 7.2.0 y 7.0.0, permite a un atacante no autenticado llevar a cabo operaciones en la interfaz administrativa por medio de peticiones HTTP o HTTPS especialmente diseñadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS, FortiProxy, FortiSwitchManager","versions":[{"version":"FortiOS 7.2.1, 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiProxy 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0; FortiSwitchManager 7.2.0, 7.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2022-10-11T00:00:00+00:00","id":"CVE-2022-40684","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-10-11","cisaActionDue":"2022-11-01","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet Multiple Products Authentication Bypass Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"B778AD94-D279-42B4-A062-8231F14936B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5B4A6B0D-1614-443B-8EBA-A8FBC2E1A832"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2B73D78B-2270-45B7-854E-F985B8D88F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"A86B1AB3-F33E-461C-A19C-C3A51B47AC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"B2DDB271-0A73-4C94-B3CE-B766E99898C0"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-377","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/169431/Fortinet-FortiOS-FortiProxy-FortiSwitchManager-Authentication-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/171515/Fortinet-7.2.1-Authentication-Bypass.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-40684","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2022-29055","sourceIdentifier":"psirt@fortinet.com","published":"2022-10-18T15:15:09.620","lastModified":"2026-06-17T04:39:31.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4, 2.0.0 through 2.0.9, 1.2.x allows a remote unauthenticated or authenticated attacker to crash the sslvpn daemon via an HTTP GET request."},{"lang":"es","value":"Un acceso de puntero no inicializado en Fortinet FortiOS versión 7.2.0, 7.0.0 hasta 7.0.5, 6.4.0 hasta 6.4.8, 6.2.0 hasta 6.2.10, 6.0.x, FortiProxy versión 7. 0.0 hasta 7.0.4, 2.0.0 hasta 2.0.9, 1.2.x permite a un atacante remoto no autenticado o autenticado bloquear el demonio sslvpn por medio de una petición HTTP GET"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS, FortiProxy","versions":[{"version":"FortiOS 7.2.0, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0; FortiProxy 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 2.0.9, 2.0.8, 2.0.7, 2.0.6, 2.0.5, 2.0.4, 2.0.3, 2.0.2, 2.0.1, 2.0.0, 1.2.13, 1.2.12, 1.2.11, 1.2.10, 1.2.9, 1.2.8, 1.2.7, 1.2.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:53.388887Z","id":"CVE-2022-29055","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-824"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.6","versionEndExcluding":"1.2.13","matchCriteriaId":"95DEEC45-DE3D-4C1D-8FA3-163BF6FC12A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.10","matchCriteriaId":"4FAF62D3-E63F-4987-B030-5646E32FE6EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"B778AD94-D279-42B4-A062-8231F14936B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.11","matchCriteriaId":"38DA2E7D-2367-45B6-96FE-4BA3C0C75E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.10","matchCriteriaId":"6A7730E2-63AD-48F2-AE0A-6C8C9369A734"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"A86B1AB3-F33E-461C-A19C-C3A51B47AC5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-086","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-33872","sourceIdentifier":"psirt@fortinet.com","published":"2022-10-18T15:15:09.687","lastModified":"2026-06-17T04:49:23.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Telnet login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the underlying shell."},{"lang":"es","value":"Unas vulnerabilidades de neutralización inapropiada de los elementos especiales usados en un Comando del Sistema Operativo (\"Inyección de Comandos del Sistema Operativo\") [CWE-78] en los componentes de inicio de sesión de Telnet de FortiTester versiones 2.3.0 hasta 3.9.1, 4.0.0 hasta 4.2.0, 7.0.0 hasta 7.1.0, puede permitir a un atacante remoto no autenticado ejecutar un comando arbitrario en el shell subyacente"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiTester","versions":[{"version":"FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:14.182918Z","id":"CVE-2022-33872","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndExcluding":"3.9.2","matchCriteriaId":"0A56D42B-F3B0-419F-8F1B-2826E28436BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.2.1","matchCriteriaId":"FE2EA412-DFA8-4EA8-80B1-081B994AFEDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.1.1","matchCriteriaId":"B708B54C-64C3-4793-8F81-896CFCA2AFF9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-237","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-33873","sourceIdentifier":"psirt@fortinet.com","published":"2022-10-18T15:15:09.743","lastModified":"2026-06-17T04:49:23.953","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Console login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to execute arbitrary command in the underlying shell."},{"lang":"es","value":"Unas vulnerabilidades de neutralización inapropiada de los elementos especiales usados en un comando del Sistema Operativo (\"Inyección de Comandos del Sistema Operativo\") [CWE-78] en los componentes de inicio de sesión de la consola de FortiTester versiones 2.3.0 hasta 3.9.1, 4.0.0 hasta 4.2.0, 7.0.0 hasta 7.1.0, puede permitir a un atacante no autenticado ejecutar un comando arbitrario en el shell subyacente"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiTester","versions":[{"version":"FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:19.545862Z","id":"CVE-2022-33873","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndExcluding":"3.9.2","matchCriteriaId":"0A56D42B-F3B0-419F-8F1B-2826E28436BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.2.1","matchCriteriaId":"FE2EA412-DFA8-4EA8-80B1-081B994AFEDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.1.1","matchCriteriaId":"B708B54C-64C3-4793-8F81-896CFCA2AFF9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-237","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-33874","sourceIdentifier":"psirt@fortinet.com","published":"2022-10-18T15:15:09.800","lastModified":"2026-06-17T04:49:24.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in SSH login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated remote attacker to execute arbitrary command in the underlying shell."},{"lang":"es","value":"Unas vulnerabilidades de neutralización inapropiada de los elementos especiales usados en un comando del Sistema Operativo (\"Inyección de Comandos del Sistema Operativo\") [CWE-78] en los componentes de inicio de sesión SSH de FortiTester versiones 2.3.0 hasta 3.9.1, 4.0.0 hasta 4.2.0, 7.0.0 hasta 7.1.0, puede permitir a un atacante remoto no autenticado ejecutar un comando arbitrario en el shell subyacente"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiTester","versions":[{"version":"FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:12.841801Z","id":"CVE-2022-33874","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndExcluding":"3.9.2","matchCriteriaId":"0A56D42B-F3B0-419F-8F1B-2826E28436BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.2.1","matchCriteriaId":"FE2EA412-DFA8-4EA8-80B1-081B994AFEDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.1.1","matchCriteriaId":"B708B54C-64C3-4793-8F81-896CFCA2AFF9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-237","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-26119","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:50.427","lastModified":"2026-06-17T04:34:43.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to perform operations on the Glassfish server directly via a hardcoded password."},{"lang":"es","value":"Una vulnerabilidad de autenticación incorrecta en Fortinet FortiSIEM anterior a 6.5.0 permite a un atacante local con acceso CLI realizar operaciones en el servidor Glassfish directamente a través de una contraseña codificada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSIEM","versions":[{"version":"FortiSIEM 6.4.0, 6.3.3, 6.3.2, 6.3.1, 6.3.0, 6.2.1, 6.2.0, 6.1.2, 6.1.1, 6.1.0, 5.4.0, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.2, 5.2.1, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.1, 5.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:15.590461Z","id":"CVE-2022-26119","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.3","matchCriteriaId":"D52F2E6B-9A88-4DB4-8CB9-09A3AFFF1685"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.5","versionEndIncluding":"5.2.8","matchCriteriaId":"C5F193AB-AC8D-4889-B34D-DEAF83E40B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.3","matchCriteriaId":"A0258A88-352D-4F9A-894D-F7442CAFE461"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.2","matchCriteriaId":"24480037-F5CE-4CCE-800D-8C707B7F36AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.3","matchCriteriaId":"D9FC4C46-F269-4635-80BE-BED292538FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"966F62A1-10E7-4AFF-8725-2A4425179CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9040EA7-86F7-4553-A0C8-A6C76B0C9E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE69B846-3B23-401D-98D0-46DC976A25FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DE4C2A49-23CB-4104-A345-46B3B4A29A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91E43A1B-D4C5-4FFF-9D3E-00140023921E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"51452B16-AB83-41D3-8779-3E1AEA818AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3F453DE5-E31D-4BD1-8978-DD6D166045E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C48AC74D-9FBE-4194-9BE8-FD2D6A0EC788"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BFFA27A5-0168-4261-9A04-D2DBB0A9946D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-064","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-26122","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:52.747","lastModified":"2026-06-17T04:34:43.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64."},{"lang":"es","value":"Una verificación insuficiente de la vulnerabilidad de autenticidad de datos [CWE-345] en los motores FortiClient, FortiMail y FortiOS AV versión 6.2.168 e inferiores y la versión 6.4.274 e inferiores puede permitir a un atacante eludir el motor AV mediante la manipulación del archivo adjunto MIME con basura y pad. caracteres en base64."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet AV Engine, FortiMail, FortiOS, FortiClient","versions":[{"version":"AV Engine version 6.2.168 and below and version 6.4.274 and below.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","baseScore":8.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":4.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:05.845844Z","id":"CVE-2022-26122","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:0.4.23:*:*:*:*:*:*:*","matchCriteriaId":"4E472D86-EC41-4AC8-AA7E-E2D94F123680"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:2.0.49:*:*:*:*:*:*:*","matchCriteriaId":"0A6024DF-0DB4-420B-8226-1CBD55A92364"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:2.0.60:*:*:*:*:*:*:*","matchCriteriaId":"BF2C1609-3538-4419-B75C-32C84B21A75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:4.4.54:*:*:*:*:*:*:*","matchCriteriaId":"7051D640-5891-415E-8A77-F68C35134954"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:6.33:*:*:*:*:*:*:*","matchCriteriaId":"4AE41E36-D7B9-42F0-9C34-FA18F081B2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:6.137:*:*:*:*:*:*:*","matchCriteriaId":"B51453FA-C7D3-481B-BC3B-46D94009E3FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:6.142:*:*:*:*:*:*:*","matchCriteriaId":"35E2F910-2553-4DC8-8730-0A0BF16A91B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:6.144:*:*:*:*:*:*:*","matchCriteriaId":"17870D25-F9BF-47F3-A63F-63DCF0C0A4D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:6.145:*:*:*:*:*:*:*","matchCriteriaId":"F532E565-F438-4268-BEE3-F27B9B44EC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:6.156:*:*:*:*:*:*:*","matchCriteriaId":"AA32EE02-B802-43B8-A57C-3D8680C22573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:6.157:*:*:*:*:*:*:*","matchCriteriaId":"024D9F08-76C9-4E10-873E-6A4B618CE44F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:6.243:*:*:*:*:*:*:*","matchCriteriaId":"250CDE83-42CA-4F2C-83DB-1274B3B8C75D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:6.252:*:*:*:*:*:*:*","matchCriteriaId":"3B167E24-C4B2-4A06-8987-D49812D69D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:6.253:*:*:*:*:*:*:*","matchCriteriaId":"B7B97F13-AB4A-4114-BF89-D57945506991"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"01F784BF-4F89-4938-9150-F911E3EB6CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"AEDC7EE8-084C-4F9E-A510-E283FCDF9832"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"C0A5C345-7055-4F18-AE77-FF1DBE41AB89"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"43038EC9-6FD3-488C-8CA3-8B4A705C3E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2822C6B9-7FD5-4E1B-907B-F324F28A82A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.15","matchCriteriaId":"7CB40CF0-CC6A-44A5-BC5D-70DC7CA78D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.11","matchCriteriaId":"E417AB31-3C1E-47C9-941B-36026B4379E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.10","matchCriteriaId":"FF6F9869-F824-4519-986E-A032668EA7BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"DE466DB5-F176-45E6-B017-A658A0B74836"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-074","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-30307","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:52.903","lastModified":"2026-06-17T04:43:27.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to perform a man in the middle attack."},{"lang":"es","value":"Una vulnerabilidad de error de administración de claves [CWE-320] que afecta la clave de host RSA SSH en FortiOS 7.2.0 y versiones anteriores, 7.0.6 y versiones anteriores, 6.4.9 y versiones anteriores puede permitir que un atacante no autenticado realice un ataque de hombre en el medio."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","baseScore":3.9,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.5,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:04.544950Z","id":"CVE-2022-30307","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.10","matchCriteriaId":"6A7730E2-63AD-48F2-AE0A-6C8C9369A734"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.0.8","matchCriteriaId":"F2D8305A-382B-4965-9DCD-E85E7ACD126B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"B2DDB271-0A73-4C94-B3CE-B766E99898C0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-228","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-33870","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:53.053","lastModified":"2026-06-17T04:49:23.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo [CWE-78] en el intérprete de línea de comando de FortiTester 3.0.0 a 3.9.1, 4.0.0 a 4.2.0, 7.0.0 a 7.1.0 puede permitir una atacante autenticado ejecute comandos no autorizados a través de argumentos específicamente manipulados para comandos existentes."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiTester","versions":[{"version":"FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:14.340279Z","id":"CVE-2022-33870","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"98433F67-056E-4371-B482-93A2EBF0C237"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D8609203-C2ED-4821-A836-E81479406B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3A0E475B-5CDF-40DB-A923-5DEB093D246E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E7C93812-ED30-40EC-81C2-159D2095A8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"61C7F802-1490-467A-B5B6-0B2AFD468439"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"75CB9729-BCDE-41F4-8684-01FF62794E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1ED9A5FF-B3A5-4DA8-AF7E-7B6C107A6C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A8CCDEF0-9026-4F67-95B1-07286EFBB370"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"1FC82DC7-5C3C-452A-BB1D-021D935851EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"49A75B9A-D1A1-4E6A-84C7-1701DE00C8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D2934396-D757-4079-A5D7-65133CF833DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"83A5237C-C126-4AEA-8CE8-DEC82DDEC69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.9.0:*:*:*:*:*:*:*","matchCriteriaId":"14C2E2DA-6CE2-4B5E-A6CB-029967EAAFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"492036BF-130B-435B-9EDD-71732CD663A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"23A3ABD7-9694-4784-9CD4-E8A1FA715682"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E79982C9-CB89-41B9-A294-B9830897304A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7BB327AD-00E1-4397-B992-E182785E8ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E47F051E-5D15-456D-9C0D-1AE6FF347155"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90D54E79-62C6-427F-9DD1-B3A99944E418"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"48797E89-FD8C-4904-9A8B-55F8D3840DB2"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-070","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-33878","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:53.193","lastModified":"2026-06-17T04:49:24.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions 7.0.0 through 7.0.5 may allow a local authenticated attacker to obtain the SSL-VPN password in cleartext via running a logstream for the FortiTray process in the terminal."},{"lang":"es","value":"Una exposición de información sensible a una vulnerabilidad de un actor no autorizado [CWE-200] en FortiClient para Mac versiones 7.0.0 a 7.0.5 puede permitir que un atacante autenticado local obtenga la contraseña SSL-VPN en texto sin cifrar mediante la ejecución de un flujo de registro para el proceso FortiTray en la terminal."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientMac","versions":[{"version":"FortiClientMac 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","baseScore":2.2,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:03.403791Z","id":"CVE-2022-33878","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"A7400530-06A1-474F-AACA-D6C8B81B6552"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-246","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-35842","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:53.377","lastModified":"2026-06-17T04:52:23.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through 6.4.9 may allow a remote unauthenticated attacker to gain information about LDAP and SAML settings configured in FortiOS."},{"lang":"es","value":"Una exposición de información sensible a una vulnerabilidad de un actor no autorizado [CWE-200] en FortiOS SSL-VPN versiones 7.2.0, versiones 7.0.0 a 7.0.6 y versiones 6.4.0 a 6.4.9 puede permitir que un atacante remoto no autenticado obtenga información sobre las configuraciones LDAP y SAML configuradas en FortiOS."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:01.902823Z","id":"CVE-2022-35842","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"EA09A86A-A8BE-45F7-96C8-747C5DB658C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"DE466DB5-F176-45E6-B017-A658A0B74836"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-223","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-35851","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:53.570","lastModified":"2026-06-17T04:52:24.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross site scripting (XSS) attack via configuring a specially crafted IP Address."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la vulnerabilidad de generación de páginas web [CWE-79] en la interfaz de administración FortiADC 7.1.0 puede permitir que un atacante remoto y autenticado desencadene un ataque de  cross site scripting (XSS) almacenado mediante la configuración de una dirección IP especialmente manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiADC","versions":[{"version":"FortiADC 7.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:12.908877Z","id":"CVE-2022-35851","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B35D8D53-448B-474C-B7CB-324CB4ED7A82"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-314","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-38372","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:53.800","lastModified":"2026-06-17T04:56:29.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command."},{"lang":"es","value":"Una vulnerabilidad de funcionalidad oculta [CWE-1242] en FortiTester CLI 2.3.0 a 3.9.1, 4.0.0 a 4.2.0, 7.0.0 a 7.1.0 puede permitir que un usuario local privilegiado obtenga un shell root en el dispositivo a través de un comando indocumentado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiTester","versions":[{"version":"FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:11.601695Z","id":"CVE-2022-38372","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndIncluding":"3.9.1","matchCriteriaId":"00C0E7B6-1837-4D91-A582-95455D0AA092"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.2.0","matchCriteriaId":"C3B44324-2384-4801-98B1-A2B4712AAF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90D54E79-62C6-427F-9DD1-B3A99944E418"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"48797E89-FD8C-4904-9A8B-55F8D3840DB2"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-283","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-38373","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:54.067","lastModified":"2026-06-17T04:56:29.127","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management interface 4.2.0, 4.1.0 through 4.1.1, 4.0.2 may allow an authenticated user to perform a cross site scripting (XSS) attack via sending requests with specially crafted lure resource ID."},{"lang":"es","value":"Una neutralización inadecuada de la vulnerabilidad de entrada durante la generación de páginas web [CWE-79] en la interfaz de administración de FortiDeceptor 4.2.0, 4.1.0 a 4.1.1, 4.0.2 puede permitir que un usuario autenticado realice un ataque de cross site scripting (XSS) a través de enviar solicitudes con una ID de recurso de lure especialmente manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiDeceptor","versions":[{"version":"FortiDeceptor 4.2.0, 4.1.0 through 4.1.1, 4.0.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:10.331849Z","id":"CVE-2022-38373","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2D76D269-CEDA-4986-A3EF-90711E7C6055"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"48655ECC-C9A9-4AD9-993B-7B2965E9266F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C2CF71B3-7E56-4D31-BE5D-682D553249BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BC3F4599-8FB1-40AF-96A9-11B58DE44C95"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-331","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-38374","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:54.303","lastModified":"2026-06-17T04:56:29.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de la página web (\"cross-site scripting\") en Fortinet FortiADC 7.0.0 - 7.0.2 y 6.2.0 - 6.2.4 permite a un atacante ejecutar código o comandos no autorizados a través de la URL y los campos de Usuario observado en las vistas de registro de tráfico y eventos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiADC","versions":[{"version":"FortiADC 7.0.2, 7.0.1, 7.0.0, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:08.888380Z","id":"CVE-2022-38374","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.4","matchCriteriaId":"BF25E7C2-AAE8-4DD6-AE31-F1B458194ED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"192B5617-C47B-40B9-8074-731783382F46"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-232","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-38380","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:54.547","lastModified":"2026-06-17T04:56:29.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control [CWE-284] vulnerability in FortiOS version 7.2.0 and versions 7.0.0 through 7.0.7 may allow a remote authenticated read-only user to modify the interface settings via the API."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiOS versión 7.2.0 y versiones 7.0.0 a 7.0.7 puede permitir que un usuario remoto de solo lectura autenticado modifique la configuración de la interfaz a través de la API."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiOS","versions":[{"version":"FortiOS 7.2.0, 7.0.7, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:19:00.406483Z","id":"CVE-2022-38380","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"DEC5CAD3-53CB-45C3-B4EA-10AEFE6C0016"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-174","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-38381","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:54.773","lastModified":"2026-06-17T04:56:30.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all versions, 6.0.0 all versions, 6.1.0 all versions, 6.2.0 through 6.2.3, and 7.0.0 through 7.0.2. This may allow a remote attacker without privileges to bypass some Web Application Firewall (WAF) protection such as the SQL Injection and XSS filters via a malformed HTTP request."},{"lang":"es","value":"Existe un manejo inadecuado de la vulnerabilidad de solicitud con formato incorrecto [CWE-228] en FortiADC 5.0 todas las versiones, 6.0.0 todas las versiones, 6.1.0 todas las versiones, 6.2.0 a 6.2.3 y 7.0.0 a 7.0.2. Esto puede permitir a un atacante remoto sin privilegios eludir alguna protección del Firewall de aplicaciones web (WAF), como la inyección SQL y los filtros XSS, a través de una solicitud HTTP con formato incorrecto."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiADC","versions":[{"version":"FortiADC 7.0.2, 7.0.1, 7.0.0, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.1.6, 6.1.5, 6.1.4, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0, 5.4.5, 5.4.4, 5.4.3, 5.4.2, 5.4.1, 5.4.0, 5.3.7, 5.3.6, 5.3.5, 5.3.4, 5.3.3, 5.3.2, 5.3.1, 5.3.0, 5.2.8, 5.2.7, 5.2.6, 5.2.5, 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.3, 5.1.2, 5.1.1, 5.1.0, 5.0.4, 5.0.3, 5.0.2, 5.0.1, 5.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:52.126283Z","id":"CVE-2022-38381","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.4","matchCriteriaId":"A3674BC9-FCA2-4DFD-8BDC-A5AE0256F293"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.7","matchCriteriaId":"6B01E632-37EA-441A-81A6-D6CE9A8997A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.8","matchCriteriaId":"6B546C4E-F9AF-4514-B5A9-BD29A1FE663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.7","matchCriteriaId":"A3EEDDB2-61AC-43F4-9719-3548057EF30E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.5","matchCriteriaId":"54EBC78D-0358-474F-9654-3EF9950D563B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.3","matchCriteriaId":"51C6A8FD-8D0D-4CBA-BA34-A34D12CE69ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"57372C1E-C3EE-4B19-8B24-79B9824634A2"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-234","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-39945","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:54.973","lastModified":"2026-06-17T04:58:33.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an authenticated admin user assigned to a specific domain to access and modify other domains information via insecure direct object references (IDOR)."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiMail 7.2.0, 7.0.0 a 7.0.3, 6.4 todas las versiones, 6.2 todas las versiones, 6.0 todas las versiones puede permitir que un usuario administrador autenticado asignado a un dominio específico acceda y modifique información de otros dominios a través de referencias directas a objetos inseguras (IDOR)."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiMail","versions":[{"version":"FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:59.072137Z","id":"CVE-2022-39945","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"01F784BF-4F89-4938-9150-F911E3EB6CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"AEDC7EE8-084C-4F9E-A510-E283FCDF9832"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"7D25AB0A-3B0C-40B5-8D7D-78DA7567F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"3680FCC2-6397-4726-AA94-902C3831EDD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BD3A9BF6-5A5E-4D25-BDB4-CD9AA9DA8580"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-066","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-39949","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:55.197","lastModified":"2026-06-17T04:58:34.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processes with special tools and bypass the EDR protection."},{"lang":"es","value":"Un control inadecuado de un recurso a través de su vulnerabilidad de vida útil [CWE-664] en FortiEDR CollectorWindows 4.0.0 a 4.1, 5.0.0 a 5.0.3.751, 5.1.0 puede permitir que un usuario privilegiado finalice los procesos de FortiEDR con herramientas especiales y omita la protección EDR."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiEDR","versions":[{"version":"FortiEDR CollectorWindows 4.0.0  through 4.1, 5.0.0 through 5.0.3.751, 5.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:57.805744Z","id":"CVE-2022-39949","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.0","matchCriteriaId":"E1F70A89-3907-44A5-AD26-71B9F87760F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.3.751","matchCriteriaId":"3DFCF489-E822-49A4-83B9-927B8C12AB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.2.0.2288","matchCriteriaId":"613C8284-F9DE-4DFC-AA25-4B7E13E3117E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-218","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-39950","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:55.537","lastModified":"2026-06-17T04:58:34.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] exists in FortiManager and FortiAnalyzer 6.0.0 all versions, 6.2.0 all versions, 6.4.0 through 6.4.8, and 7.0.0 through 7.0.4. Report templates may allow a low privilege level attacker to perform an XSS attack via posting a crafted CKeditor \"protected\" comment as described in CVE-2020-9281."},{"lang":"es","value":"Existe una neutralización inadecuada de la entrada durante la vulnerabilidad de generación de páginas web [CWE-79] en FortiManager y FortiAnalyzer 6.0.0 todas las versiones, 6.2.0 todas las versiones, 6.4.0 a 6.4.8 y 7.0.0 a 7.0.4. Las plantillas de informes pueden permitir que un atacante de bajo nivel de privilegios realice un ataque XSS mediante la publicación de un comentario \"protected\" de CKeditor manipulado como se describe en CVE-2020-9281."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiAnalyzer, FortiManager","versions":[{"version":"FortiAnalyzer 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0; FortiManager 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:07.696131Z","id":"CVE-2022-39950","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.2.9","matchCriteriaId":"84AD143D-6ED3-4570-84A6-9ED5445F6D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"19769C95-B563-476D-A4B3-6C317294F1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.4","matchCriteriaId":"03F72414-2947-41B8-B70D-7F7D3321BD04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.2.9","matchCriteriaId":"AA98A496-328F-4B63-B2EE-3B7E89794C37"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"78B81744-E114-4AFD-9BBD-641FCE9C40A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.4","matchCriteriaId":"66F101B8-39A0-49E0-B320-265C597D4888"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-228","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42473","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-02T12:15:55.773","lastModified":"2026-06-17T05:04:59.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and 7.2.0 allows an attacker to disclose information via logging into the database using a privileged account without a password."},{"lang":"es","value":"Una autenticación faltante para una vulnerabilidad de función crítica en Fortinet FortiSOAR 6.4.0 - 6.4.4 y 7.0.0 - 7.0.3 y 7.2.0 permite a un atacante revelar información iniciando sesión en la base de datos usando una cuenta privilegiada sin contraseña."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiSOAR","versions":[{"version":"FortiSOAR 7.2.0, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.4, 6.4.3, 6.4.1, 6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:56.576335Z","id":"CVE-2022-42473","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.4","matchCriteriaId":"A032E20C-C28B-496B-9AD8-AC3189C3BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"718E50CF-64BB-4ACC-8DEA-35234BB4213F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6445F49A-DBBD-4CED-9A5F-118628EB5F2C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-216","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-38377","sourceIdentifier":"psirt@fortinet.com","published":"2022-11-25T16:15:10.747","lastModified":"2026-06-17T04:56:29.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.0 through 6.0.12 may allow a remote and authenticated admin user assigned to a specific ADOM to access other ADOMs information such as device information and dashboard information."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiManager 7.2.0, 7.0.0 a 7.0.3, 6.4.0 a 6.4.7, 6.2.0 a 6.2.9, 6.0.0 a 6.0.11 y FortiAnalyzer 7.2 .0, 7.0.0 a 7.0.3, 6.4.0 a 6.4.8, 6.2.0 a 6.2.10, 6.0.0 a 6.0.12 pueden permitir que un usuario administrador remoto y autenticado asignado a un ADOM específico acceda a otros ADOM de información, como información del dispositivo e información del panel."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:55.318018Z","id":"CVE-2022-38377","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"2318A6AC-AA3E-4604-968C-35A46E79FCB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.10","matchCriteriaId":"5E816164-8C08-4BF7-863B-112076AB6AE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"19769C95-B563-476D-A4B3-6C317294F1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"42D096D2-1FCB-43A6-8CF3-3226F631BAC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"319D2F9D-E1E5-49C7-8ABD-0A64D7B05D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"FD729EF3-1665-4CE7-9FDD-450D5F79A2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"7D79F4BE-B6BB-414A-A132-D3650B2B5B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"105F23CF-6375-402E-A2ED-9827510196EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"AA4F8D67-139F-4524-88D4-B32A1580BFBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"407755AA-0C23-4C5B-88A2-8BC12A3D268D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-143","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-30305","sourceIdentifier":"psirt@fortinet.com","published":"2022-12-06T17:15:10.660","lastModified":"2026-06-17T04:43:27.270","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2  may allow a remote attacker to repeatedly enter incorrect credentials without causing a log entry, and with no limit on the number of failed authentication attempts."},{"lang":"es","value":"Una vulnerabilidad de registro insuficiente [CWE-778] en las versiones 4.0.0 a 4.0.2, 3.2.0 a 3.2.3 y 3.1.0 a 3.1.5 de FortiSandbox y las versiones 4.2.0, 4.1.0 a 4.1.1 de FortiDeceptor. 4.0.0 a 4.0.2, 3.3.0 a 3.3.3, 3.2.0 a 3.2.2, 3.1.0 a 3.1.1 y 3.0.0 a 3.0.2 pueden permitir que un atacante remoto ingrese repetidamente credenciales incorrectas sin generar una entrada de registro y sin límite en el número de intentos fallidos de autenticación."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.3","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDeceptor","defaultStatus":"unaffected","versions":[{"version":"4.2.0","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.1","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.3","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.2","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.1","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:52.650973Z","id":"CVE-2022-30305","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-778"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"},{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.2","matchCriteriaId":"01A6C490-83C0-439C-BC36-157D732F362B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.2","matchCriteriaId":"DD1D0126-C1C4-4F76-A78F-F0BEC7B3EB0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndIncluding":"3.3.3","matchCriteriaId":"840D39F9-C790-4AF6-9E9D-2299083C008A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.2","matchCriteriaId":"16BF9690-3D39-4FCC-A314-68C17E1E0892"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"67A22BDE-857F-4A92-A027-38C4A6D6144D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5DB5762A-D14A-4F7F-A9DA-1979FFFBF1E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"48655ECC-C9A9-4AD9-993B-7B2965E9266F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C2CF71B3-7E56-4D31-BE5D-682D553249BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BC3F4599-8FB1-40AF-96A9-11B58DE44C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.5","matchCriteriaId":"2C47A3DB-A02A-488D-B0E1-867A19CE43B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.2","matchCriteriaId":"30CE4EF6-1AC0-49A2-BC7B-43D1B453DC3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3DDB3490-E30F-45CC-81B7-EFB5C1A60DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"143DD85B-4CE7-409D-B215-6069D2EF33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"53070F6A-CC5B-43C9-96F9-2C0930A8D3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4B38F72A-A271-43FE-8FBF-02AB87BA9D47"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-170","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-33875","sourceIdentifier":"psirt@fortinet.com","published":"2022-12-06T17:15:10.750","lastModified":"2026-06-17T04:49:24.167","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en una vulnerabilidad de Comando SQL (\"Inyección SQL\") en Fortinet FortiADC versión 7.1.0, versión 7.0.0 a 7.0.2 y versión 6.2.4 y anteriores permite a un atacante autenticado ejecutar código no autorizado o comandos a través de solicitudes HTTP específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:48.144389Z","id":"CVE-2022-33875","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"6.2.4","matchCriteriaId":"186A898A-F330-49A1-9E29-60F9C95DC4C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D78A58AA-5F2F-4CC3-8299-EC320E36CF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE3123F6-4360-45F8-9A90-C0D35CC73D1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B5720B3B-3C57-43E6-B453-65851A46E724"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B35D8D53-448B-474C-B7CB-324CB4ED7A82"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-252","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-33876","sourceIdentifier":"psirt@fortinet.com","published":"2022-12-06T17:15:10.813","lastModified":"2026-06-17T04:49:24.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to retrieve files with specific extension from the underlying Linux system via crafted HTTP requests."},{"lang":"es","value":"Múltiples instancias de vulnerabilidad de validación de entrada incorrecta en Fortinet FortiADC versión 7.1.0, versión 7.0.0 a 7.0.2 y versión 6.2.4 y anteriores permiten a un atacante autenticado recuperar archivos con una extensión específica del sistema Linux subyacente a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:49.792379Z","id":"CVE-2022-33876","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"6.2.4","matchCriteriaId":"4CB8E1AB-AA67-4AA8-8895-E8D95A1DA963"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D78A58AA-5F2F-4CC3-8299-EC320E36CF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE3123F6-4360-45F8-9A90-C0D35CC73D1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B5720B3B-3C57-43E6-B453-65851A46E724"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B35D8D53-448B-474C-B7CB-324CB4ED7A82"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-253","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-35843","sourceIdentifier":"psirt@fortinet.com","published":"2022-12-06T17:15:10.873","lastModified":"2026-06-17T04:52:23.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0,  7.0.0 through 7.0.7,  6.4.0 through 6.4.9, 6.2 all versions, 6.0 all versions and FortiProxy SSH login component 7.0.0 through 7.0.5, 2.0.0 through 2.0.10, 1.2.0 all versions may allow a remote and unauthenticated attacker to login into the device via sending specially crafted Access-Challenge response from the Radius server."},{"lang":"es","value":"Una omisión de autenticación por vulnerabilidad de datos supuestamente inmutables [CWE-302] en el componente de inicio de sesión SSH de FortiOS 7.2.0, 7.0.0 a 7.0.7, 6.4.0 a 6.4.9, 6.2 todas las versiones, 6.0 todas las versiones y FortiProxy SSH El componente de inicio de sesión 7.0.0 a 7.0.5, 2.0.0 a 2.0.10, 1.2.0 todas las versiones puede permitir que un atacante remoto y no autenticado inicie sesión en el dispositivo mediante el envío de una respuesta Access-Challenge especialmente manipulada desde el servidor Radius."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThan":"6.2.*","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThan":"6.0.*","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.10","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:06.335689Z","id":"CVE-2022-35843","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.10","matchCriteriaId":"03222066-2B1D-4854-8CAE-6992D7F40150"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"C485003B-5F30-46E7-A794-84D66500739A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.15","matchCriteriaId":"7CB40CF0-CC6A-44A5-BC5D-70DC7CA78D49"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"20B53FFE-073D-43E9-9D6F-9C86937C0228"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"EA09A86A-A8BE-45F7-96C8-747C5DB658C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"DEC5CAD3-53CB-45C3-B4EA-10AEFE6C0016"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8B736A23-95B8-4D87-863A-AC8E901078EA"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-255","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-38379","sourceIdentifier":"psirt@fortinet.com","published":"2022-12-06T17:15:10.933","lastModified":"2026-06-17T04:56:29.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR."},{"lang":"es","value":"La neutralización incorrecta de la entrada durante la generación de la página web [CWE-79] en FortiSOAR 7.0.0 hasta 7.0.3 y 7.2.0 puede permitir que un atacante autenticado inyecte etiquetas HTML a través de campos de entrada de varios componentes dentro de FortiSOAR."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","baseScore":3.5,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:51.343015Z","id":"CVE-2022-38379","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"718E50CF-64BB-4ACC-8DEA-35234BB4213F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6445F49A-DBBD-4CED-9A5F-118628EB5F2C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-220","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-40680","sourceIdentifier":"psirt@fortinet.com","published":"2022-12-06T17:15:10.997","lastModified":"2026-06-17T05:01:49.767","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.15, 6.2.2 - 6.2.12, 6.4.0 - 6.4.9 and 7.0.0 - 7.0.3 allows a privileged attacker to execute unauthorized code or commands via storing malicious payloads in replacement messages."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de la página web (\"cross-site scripting\") en Fortinet FortiOS 6.0.7 - 6.0.15, 6.2.2 - 6.2.12, 6.4.0 - 6.4.9 y 7.0.0 - 7.0. 3 permite a un atacante privilegiado ejecutar código o comandos no autorizados mediante el almacenamiento de payloads maliciosos en mensajes de reemplazo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.11","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.2.2","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.7","lessThanOrEqual":"6.0.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:53.836074Z","id":"CVE-2022-40680","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.7","versionEndIncluding":"6.0.15","matchCriteriaId":"BAD059AE-6636-441E-9E88-82266F8B4445"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.2","versionEndIncluding":"6.2.12","matchCriteriaId":"A7EE44C2-0DB5-4159-B6C7-70DF0B00A0C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"EA09A86A-A8BE-45F7-96C8-747C5DB658C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"AB0E6170-82F7-4A63-95B7-9D02E27B6867"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-248","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42475","sourceIdentifier":"psirt@fortinet.com","published":"2023-01-02T09:15:09.490","lastModified":"2026-06-17T05:04:59.630","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier  and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer de almacenamiento dinámico [CWE-122] en FortiOS SSL-VPN 7.2.0 a 7.2.2, 7.0.0 a 7.0.8, 6.4.0 a 6.4.10, 6.2.0 a 6.2.11, 6.0 .15 y anteriores y FortiProxy SSL-VPN 7.2.0 hasta 7.2.1, 7.0.7 y anteriores pueden permitir que un atacante remoto no autenticado ejecute código o comandos arbitrarios a través de solicitudes específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.11","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.15","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.14","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.13","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.15","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:26:56.926267Z","id":"CVE-2022-42475","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-12-13","cisaActionDue":"2023-01-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-197"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.14","matchCriteriaId":"5BB7E21E-A68B-44FC-8F0E-EF5926186F26"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.15","matchCriteriaId":"3F93F9C8-6064-4CED-88DF-3580C517AB51"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.13","matchCriteriaId":"0507F264-9E8D-4F9D-AB18-0C6CA5BD69F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.14","matchCriteriaId":"AC0AFBC1-5C11-412E-9979-AF89DD26EFCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.16","matchCriteriaId":"795298D3-0C06-471C-87E2-2D04AC190EAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.12","matchCriteriaId":"F6785608-14A0-4825-BEC0-899E55A9FDF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.11","matchCriteriaId":"55E67EF5-6AF0-410A-BDE7-CF745ED97328"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"C424900B-9A5E-440C-996B-2CF426F2CAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"00E89C95-E9FB-473A-BEB0-FA8E7225AC55"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.12","matchCriteriaId":"954674E3-7E54-4D94-80DE-CB73AE0452EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"81E60913-FBE9-467B-AB4B-CA85E97527BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"F5B24750-4A57-4F80-AAE8-8AC316B376C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.15","matchCriteriaId":"77974073-D92D-4EB8-854F-A6DCCD13C868"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.12","matchCriteriaId":"F6785608-14A0-4825-BEC0-899E55A9FDF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.10","matchCriteriaId":"6A7730E2-63AD-48F2-AE0A-6C8C9369A734"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"EE6D1D19-1227-42BE-87A7-E798D60059A5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fim-7901e:-:*:*:*:*:*:*:*","matchCriteriaId":"689B8A1F-112D-42CE-A29B-692EF00150AD"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fim-7904e:-:*:*:*:*:*:*:*","matchCriteriaId":"33603726-AB6B-4773-904E-DE103CDCEA70"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fim-7910e:-:*:*:*:*:*:*:*","matchCriteriaId":"DB6056EE-E76C-4064-B252-E0D65A1CBFBB"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fim-7920e:-:*:*:*:*:*:*:*","matchCriteriaId":"43DF83AC-1B86-4C45-B5A3-EF56B65C9BF7"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fim-7921f:-:*:*:*:*:*:*:*","matchCriteriaId":"F7BAD653-D841-4744-AE85-C24FC1F3F6DF"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fim-7941f:-:*:*:*:*:*:*:*","matchCriteriaId":"8ADCB4F1-E237-4525-95C4-2C8EFDD7A109"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-6300f:-:*:*:*:*:*:*:*","matchCriteriaId":"BB61396B-D9EF-44DE-B211-E92EF5A52888"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-6300f-dc:-:*:*:*:*:*:*:*","matchCriteriaId":"1AD28C00-00CC-433F-BD7B-AC58254E4785"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-6500f:-:*:*:*:*:*:*:*","matchCriteriaId":"1A72901A-EA5B-48B0-9D0B-A8CD8903413C"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-6500f-dc:-:*:*:*:*:*:*:*","matchCriteriaId":"D56B4C97-9BC9-4FB9-9623-F2897050FE8B"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-6501f:-:*:*:*:*:*:*:*","matchCriteriaId":"50EFCC23-1135-4BC9-B180-E9045030C844"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-6501f-dc:-:*:*:*:*:*:*:*","matchCriteriaId":"1E355C55-4CAA-4875-95F6-FCF3D360039F"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-6601f:-:*:*:*:*:*:*:*","matchCriteriaId":"ACBFBDDC-1BD8-48AA-85A3-AA727C466C8D"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-6601f-dc:-:*:*:*:*:*:*:*","matchCriteriaId":"A56F4F2D-BE9B-458C-B906-017D14DEABBA"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-7030e:-:*:*:*:*:*:*:*","matchCriteriaId":"DEADC8C2-1DB4-4CB9-A014-7EF279C03C08"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-7040e:-:*:*:*:*:*:*:*","matchCriteriaId":"A6BBD9D7-5F9B-4438-91F9-EB496C8186C5"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-7060e:-:*:*:*:*:*:*:*","matchCriteriaId":"187AAEF7-3FBF-488C-9935-2FA15D131228"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate-7121f:-:*:*:*:*:*:*:*","matchCriteriaId":"D9294854-FC23-4682-A695-325CA3347F37"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fpm-7620e:-:*:*:*:*:*:*:*","matchCriteriaId":"CAFABB00-194B-41E4-940C-A5CF3A9CECEB"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fpm-7620f:-:*:*:*:*:*:*:*","matchCriteriaId":"B2CC0365-4336-4700-9A29-1AEA0CA781AF"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fpm-7630e:-:*:*:*:*:*:*:*","matchCriteriaId":"D7E4F7F8-50E4-4774-B1E7-13DC1A289104"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-398","source":"psirt@fortinet.com","tags":["Exploit","Mitigation","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42475","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2022-35845","sourceIdentifier":"psirt@fortinet.com","published":"2023-01-03T17:15:10.327","lastModified":"2026-06-17T04:52:23.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiTester 7.1.0, 7.0 all versions, 4.0.0 through 4.2.0, 2.3.0 through 3.9.1 may allow an authenticated attacker to execute arbitrary commands in the underlying shell."},{"lang":"es","value":"Múltiples vulnerabilidades de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') [CWE-78] en FortiTester 7.1.0, 7.0 todas las versiones, 4.0.0 a 4.2.0, 2.3.0 a 3.9.1 pueden permitir que un atacante autenticado ejecute comandos arbitrarios en el shell subyacente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiTester","defaultStatus":"unaffected","versions":[{"version":"7.1.0","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"4.2.0","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.1","versionType":"semver","status":"affected"},{"version":"4.0.0","status":"affected"},{"version":"3.9.0","lessThanOrEqual":"3.9.1","versionType":"semver","status":"affected"},{"version":"3.8.0","status":"affected"},{"version":"3.7.0","lessThanOrEqual":"3.7.1","versionType":"semver","status":"affected"},{"version":"3.6.0","status":"affected"},{"version":"3.5.0","lessThanOrEqual":"3.5.1","versionType":"semver","status":"affected"},{"version":"3.4.0","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.1","versionType":"semver","status":"affected"},{"version":"3.2.0","status":"affected"},{"version":"3.1.0","status":"affected"},{"version":"3.0.0","status":"affected"},{"version":"2.9.0","status":"affected"},{"version":"2.8.0","status":"affected"},{"version":"2.7.0","status":"affected"},{"version":"2.6.0","status":"affected"},{"version":"2.5.0","status":"affected"},{"version":"2.4.0","lessThanOrEqual":"2.4.1","versionType":"semver","status":"affected"},{"version":"2.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:04.902426Z","id":"CVE-2022-35845","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndIncluding":"3.9.1","matchCriteriaId":"00C0E7B6-1837-4D91-A582-95455D0AA092"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"23A3ABD7-9694-4784-9CD4-E8A1FA715682"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E79982C9-CB89-41B9-A294-B9830897304A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7BB327AD-00E1-4397-B992-E182785E8ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E47F051E-5D15-456D-9C0D-1AE6FF347155"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90D54E79-62C6-427F-9DD1-B3A99944E418"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"48797E89-FD8C-4904-9A8B-55F8D3840DB2"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-274","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-39947","sourceIdentifier":"psirt@fortinet.com","published":"2023-01-03T17:15:10.400","lastModified":"2026-06-17T04:58:33.893","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.2, FortiADC version 6.2.0 through 6.2.3, FortiADC version version 6.1.0 through 6.1.6, FortiADC version 6.0.0 through 6.0.4, FortiADC version 5.4.0 through 5.4.5 may allow an attacker to execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiADC versión 7.0.0 a 7.0.2, FortiADC versión 6.2.0 a 6.2.3, FortiADC versión 6.1.0 a 6.1.6 , FortiADC versión 6.0.0 a 6.0.4, FortiADC versión 5.4.0 a 5.4.5 puede permitir a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.3","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:02.386044Z","id":"CVE-2022-39947","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.5","matchCriteriaId":"54EBC78D-0358-474F-9654-3EF9950D563B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.3","matchCriteriaId":"51C6A8FD-8D0D-4CBA-BA34-A34D12CE69ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D78A58AA-5F2F-4CC3-8299-EC320E36CF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE3123F6-4360-45F8-9A90-C0D35CC73D1D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-061","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-41336","sourceIdentifier":"psirt@fortinet.com","published":"2023-01-03T17:15:10.463","lastModified":"2026-06-17T05:03:03.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 through 6.0.11 and all versions of 5.3, 5.2, 5.1, 5.0 management interface may allow a remote authenticated attacker to perform a stored cross site scripting (XSS) attack via sending request with specially crafted columnindex parameter."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web [CWE-79] en las versiones 6.0.0 a 6.0.11 de FortiPortal y todas las versiones de la interfaz de administración 5.3, 5.2, 5.1, 5.0 puede permitir que un atacante autenticado remoto realice un ataque de cross site scripting (XSS) almacenado mediante el envío de una solicitud con un parámetro columnindex especialmente manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.11","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.8","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.6","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.2","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:03.560184Z","id":"CVE-2022-41336","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.3","matchCriteriaId":"4AE4255A-A854-4A11-8860-A558E1D77F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.2","matchCriteriaId":"6F09B0F2-D95C-478B-9AA2-CCE1D2D1E497"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.6","matchCriteriaId":"51CAE1B0-E321-462F-B503-2C13AEF3DAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.8","matchCriteriaId":"44C143C2-D850-4768-94D0-55615D670A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"D8E37923-3D72-421C-8974-E11E5463CFF9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-313","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42471","sourceIdentifier":"psirt@fortinet.com","published":"2023-01-03T17:15:10.533","lastModified":"2026-06-17T05:04:59.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.4.0 through 6.4.2, FortiWeb version 6.3.6 through 6.3.20 may allow an authenticated and remote attacker to inject arbitrary headers."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de secuencias CRLF en encabezados HTTP ('División de respuesta HTTP') [CWE-113] en FortiWeb versión 7.0.0 a 7.0.2, FortiWeb versión 6.4.0 a 6.4.2, FortiWeb versión 6.3.6 a 6.3 .20 puede permitir que un atacante remoto y autenticado inyecte encabezados arbitrarios."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.21","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:46.754990Z","id":"CVE-2022-42471","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-113"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-74"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndIncluding":"6.3.21","matchCriteriaId":"1015CCDD-15E5-4E64-8D0B-4BE77459FD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6775BE1F-184A-45D2-9D8D-AA8F40227988"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8A50C87E-68F1-449E-8111-4082CD9BBCA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9F2DA9E1-A218-46AC-91C5-853CFED0BAF5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-250","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-45857","sourceIdentifier":"psirt@fortinet.com","published":"2023-01-05T08:15:08.800","lastModified":"2026-06-17T05:10:52.580","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted."},{"lang":"es","value":"Una vulnerabilidad de administración de usuarios incorrecta [CWE-286] en el componente de creación de VDOM de FortiManager versión 6.4.6 e inferiores puede permitir que un atacante acceda a FortiGate sin contraseña a través de VDOM recién creados después de eliminar la cuenta super_admin."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.3},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.3}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:45.615630Z","id":"CVE-2022-45857","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-286"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.9","matchCriteriaId":"E3624F5C-A78F-43FD-850A-B56F3ED30852"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.8","matchCriteriaId":"5CD3C694-585C-45D0-A631-2D18DA122935"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"0B45AE6C-9186-43F3-8087-42E94EDFF953"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-371","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42756","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:11.500","lastModified":"2026-06-17T04:10:04.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution via specifically crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"},{"version":"5.9.0","lessThanOrEqual":"5.9.1","versionType":"semver","status":"affected"},{"version":"5.8.5","lessThanOrEqual":"5.8.7","versionType":"semver","status":"affected"},{"version":"5.8.0","lessThanOrEqual":"5.8.3","versionType":"semver","status":"affected"},{"version":"5.7.0","lessThanOrEqual":"5.7.3","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.2","versionType":"semver","status":"affected"},{"version":"5.8.0","lessThan":"5.8.*","versionType":"semver","status":"affected"},{"version":"5.7.0","lessThan":"5.7.*","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThan":"5.6.*","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:11.590032Z","id":"CVE-2021-42756","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.0.8","matchCriteriaId":"D7C64AF2-21C5-4763-BF18-67B2D3D01614"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"6.1.3","matchCriteriaId":"9EFA8AB9-2777-471C-A1DA-635BDACE2F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.7","matchCriteriaId":"919112F8-1479-45F0-BE4D-91112143D2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.17","matchCriteriaId":"0B1B7CFD-96E5-40EA-9CBC-48D0255081BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"F6B93ABE-8620-4253-83C0-3D2228D20118"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-186","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-42761","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:11.603","lastModified":"2026-06-17T04:10:05.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3.16, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 through 6.0.7, 5.9.0 through 5.9.1 may allow a remote, unauthenticated attacker to infer the session identifier of other users and possibly usurp their session."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"},{"version":"5.9.0","lessThanOrEqual":"5.9.1","versionType":"semver","status":"affected"},{"version":"5.8.5","lessThanOrEqual":"5.8.7","versionType":"semver","status":"affected"},{"version":"5.8.0","lessThanOrEqual":"5.8.3","versionType":"semver","status":"affected"},{"version":"5.7.0","lessThanOrEqual":"5.7.3","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:58.060246Z","id":"CVE-2021-42761","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-384"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-384"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"5.9.2","matchCriteriaId":"E8FDE2B1-1E8E-4DA7-B545-487914EF232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.8","matchCriteriaId":"8BE261E5-059D-4B89-893A-458E0B40CFD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"6.1.3","matchCriteriaId":"9EFA8AB9-2777-471C-A1DA-635BDACE2F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.7","matchCriteriaId":"919112F8-1479-45F0-BE4D-91112143D2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.17","matchCriteriaId":"0B1B7CFD-96E5-40EA-9CBC-48D0255081BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.0","matchCriteriaId":"1725A170-7445-459F-A682-A9EA13470393"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-214","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43074","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:11.677","lastModified":"2026-06-17T04:10:28.760","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all versions, 6.1 all versions, 6.0 all versions; FortiOS 7.0.3 and below, 6.4.8 and below, 6.2 all versions, 6.0 all versions; FortiSwitch 7.0.3 and below, 6.4.10 and below, 6.2 all versions, 6.0 all versions; FortiProxy 7.0.1 and below, 2.0.7 and below, 1.2 all versions, 1.1 all versions, 1.0 all versions may allow an attacker to decrypt portions of the administrative session management cookie if able to intercept the latter."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitch","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.3","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.7","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:40.880303Z","id":"CVE-2021-43074","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"2.0.8","matchCriteriaId":"29C4F347-1E27-4517-8E9D-E932B3A7F271"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"EFEA53FA-16E1-4CDB-933C-2F886CAB15DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.3.17","matchCriteriaId":"C85CEB11-2682-448D-852A-9EE113E54539"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.0","matchCriteriaId":"1725A170-7445-459F-A682-A9EA13470393"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.9","matchCriteriaId":"E23ACB3B-E74F-4AF6-B67B-7603ED113B36"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"30F10D70-1176-4119-BF1A-C2A5FCA386D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.11","matchCriteriaId":"8C7EE382-AA93-4634-B48E-3BE9012EC96B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"69CF7A08-72CB-4CEC-9900-8B26180B2782"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-126","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-26115","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.047","lastModified":"2026-06-17T04:34:42.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the password database to efficiently mount bulk guessing attacks to recover the passwords."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:30.750261Z","id":"CVE-2022-26115","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-916"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3DDB3490-E30F-45CC-81B7-EFB5C1A60DA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"143DD85B-4CE7-409D-B215-6069D2EF33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"53070F6A-CC5B-43C9-96F9-2C0930A8D3CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4B38F72A-A271-43FE-8FBF-02AB87BA9D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0260B512-77CA-4FE8-A039-D7B287A19BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6CCD1A-3412-4A55-88A8-40B227FB00BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"51A80522-EBFC-4C3E-BF38-01453CC359F7"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-220","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-27482","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.120","lastModified":"2026-06-17T04:37:05.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.6, 6.0.x, 5.x.x allows attacker to execute arbitrary shell code as `root` via CLI commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.2","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.7","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:40.887043Z","id":"CVE-2022-27482","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.4","matchCriteriaId":"A3674BC9-FCA2-4DFD-8BDC-A5AE0256F293"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.7","matchCriteriaId":"6B01E632-37EA-441A-81A6-D6CE9A8997A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.8","matchCriteriaId":"6B546C4E-F9AF-4514-B5A9-BD29A1FE663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.7","matchCriteriaId":"A3EEDDB2-61AC-43F4-9719-3548057EF30E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.5","matchCriteriaId":"54EBC78D-0358-474F-9654-3EF9950D563B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.4","matchCriteriaId":"BF25E7C2-AAE8-4DD6-AE31-F1B458194ED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D78A58AA-5F2F-4CC3-8299-EC320E36CF5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE3123F6-4360-45F8-9A90-C0D35CC73D1D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-046","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-27489","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.190","lastModified":"2026-06-17T04:37:06.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.0.0 through 7.0.3, 5.3.2, 4.2.4 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiExtender","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"5.3.2","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.4","versionType":"semver","status":"affected"},{"version":"4.1.1","lessThanOrEqual":"4.1.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.2","versionType":"semver","status":"affected"},{"version":"3.2.1","lessThanOrEqual":"3.2.3","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.2","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:42.419938Z","id":"CVE-2022-27489","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.1","versionEndExcluding":"3.2.4","matchCriteriaId":"D7C7C2CF-4343-4DC6-A9CC-2AD085FF4719"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.3","matchCriteriaId":"BF3BA216-3C90-451D-99AC-DC64259A1312"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.1","versionEndExcluding":"4.1.9","matchCriteriaId":"D6594D0E-3A47-4E9F-B020-FBC2C1AED759"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.5","matchCriteriaId":"48A96D42-A019-422C-AB50-7CAF378FDDE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"46532FCC-760C-43ED-8DC4-81427D279980"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"39A64727-9B11-409B-94D6-D46FA7BBADE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"04C4747E-18B3-4114-81E0-1761DA523436"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4CAC470E-2A7D-4E6B-B6F4-2FE3F3977DB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6FBB6781-A4B9-4F52-92A4-12CC0A4042B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AA975BB7-6BAE-431F-ACAC-56F8E0021E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1CC2C9D3-01FD-4D5B-AE85-05B0CA6C99AA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiextender:-:*:*:*:*:*:*:*","matchCriteriaId":"A0617C1D-E321-409D-B54B-775E854A03C1"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-048","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-29054","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.263","lastModified":"2026-06-17T04:39:30.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.9, 6.2.x and 6.0.x may allow an attacker in possession of the encrypted key to decipher it."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.11","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:29.615605Z","id":"CVE-2022-29054","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-329"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.11","matchCriteriaId":"6607C71D-D434-430A-8DFD-9125381D2D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"81E60913-FBE9-467B-AB4B-CA85E97527BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.16","matchCriteriaId":"8EA5512D-6EE5-4DF3-A960-C02394F25225"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"20B53FFE-073D-43E9-9D6F-9C86937C0228"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.11","matchCriteriaId":"A87D865A-6411-4807-81D4-6A5C052C03C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"EE6D1D19-1227-42BE-87A7-E798D60059A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-080","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-30299","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.337","lastModified":"2026-06-17T04:43:26.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions may allow an authenticated attacker to retrieve specific parts of files from the underlying file system via specially crafted web requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.19","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.3","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:49.878477Z","id":"CVE-2022-30299","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.8","matchCriteriaId":"DA69D7D6-9798-4E8C-983A-6632D665175C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.3","matchCriteriaId":"FAA01761-B03C-498C-8749-CD1289E37A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.7","matchCriteriaId":"2DBCF4EF-986E-4F59-8D6D-01AB0D783091"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.20","matchCriteriaId":"1EC1014F-44DE-4FC7-B0A7-82BEA9A443F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6775BE1F-184A-45D2-9D8D-AA8F40227988"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8A50C87E-68F1-449E-8111-4082CD9BBCA9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-146","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-30300","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.403","lastModified":"2026-06-17T04:43:26.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions may allow an authenticated attacker to obtain unauthorized access to files and data via specifically crafted HTTP GET requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.18","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:42.609494Z","id":"CVE-2022-30300","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndExcluding":"6.3.19","matchCriteriaId":"9AF05A3E-F836-447D-8A2D-E3B505469812"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6775BE1F-184A-45D2-9D8D-AA8F40227988"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8A50C87E-68F1-449E-8111-4082CD9BBCA9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-136","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-30303","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.467","lastModified":"2026-06-17T04:43:26.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versions may allow an authenticated attacker to execute arbitrary shell code as `root` user via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.19","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:59.360324Z","id":"CVE-2022-30303","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.20","matchCriteriaId":"1EC1014F-44DE-4FC7-B0A7-82BEA9A443F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6775BE1F-184A-45D2-9D8D-AA8F40227988"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8A50C87E-68F1-449E-8111-4082CD9BBCA9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-163","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-30304","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.533","lastModified":"2026-06-17T04:43:27.077","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAnalyzer versions prior to 7.2.1, 7.0.4 and 6.4.8 may allow a remote unauthenticated attacker to perform a stored cross site scripting (XSS) attack via the URL parameter observed in the FortiWeb attack event logview in FortiAnalyzer."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:35.621386Z","id":"CVE-2022-30304","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"54813EA4-11C3-430F-82AC-CBD542966E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"111C793F-C2E0-4042-A269-D40E1815A672"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.9","matchCriteriaId":"CF6AC4C4-1EBB-4334-AF02-B71F56590C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"930919B2-1DF9-4216-8245-8C0F3F137C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"319D2F9D-E1E5-49C7-8ABD-0A64D7B05D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FDD88F7C-8136-4CFF-AF1E-9AE928878C7F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-166","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-30306","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.597","lastModified":"2026-06-17T04:43:27.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted password."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.19","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:46.717304Z","id":"CVE-2022-30306","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndExcluding":"6.3.20","matchCriteriaId":"27906D61-3B09-4F5D-AE32-B332851E1C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6775BE1F-184A-45D2-9D8D-AA8F40227988"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8A50C87E-68F1-449E-8111-4082CD9BBCA9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-167","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-33869","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.667","lastModified":"2026-06-17T04:49:23.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWAN","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThanOrEqual":"4.5.9","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.1","versionType":"semver","status":"affected"},{"version":"4.3.0","lessThanOrEqual":"4.3.1","versionType":"semver","status":"affected"},{"version":"4.2.5","lessThanOrEqual":"4.2.7","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.2","versionType":"semver","status":"affected"},{"version":"4.1.1","lessThanOrEqual":"4.1.3","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:33.942632Z","id":"CVE-2022-33869","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.6","matchCriteriaId":"55840EE7-E52A-4B62-929A-0A9532905159"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionStartIncluding":"4.5.0","versionEndExcluding":"4.5.10","matchCriteriaId":"23503578-6A5E-4045-A8C8-85C682030230"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4BCC0AF8-2BE5-42F9-A314-DCD528E298D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CA2D39D-5E4C-4086-A609-26B405D965BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"58F91795-5144-40AA-AA68-FFA24F845C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9D25C53F-A336-44AB-8E06-0199AF5EB7E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1BCC7CE0-E4F6-4CAA-94FC-BE29265B0225"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7C017497-5A26-4281-9712-FC531D7C3F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2FDF8FB6-F17B-432F-B79B-DD4C703EB9CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B6771205-DDA9-4FC1-8864-85F407B004F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A97AF25D-DAAC-4B3E-9455-72E1F7FD6F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"07CEAC31-80D0-4027-B5A2-87D3F85819BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"86EE7BBA-1110-4DCB-8B45-AB8B051C95EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B28F9726-1CEB-43CD-A204-E9BC641DF828"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-157","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-33871","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.730","lastModified":"2026-06-17T04:49:23.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI `execute backup-local rename` and `execute backup-local show` operations."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.19","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:48.320208Z","id":"CVE-2022-33871","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndExcluding":"6.3.20","matchCriteriaId":"27906D61-3B09-4F5D-AE32-B332851E1C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6775BE1F-184A-45D2-9D8D-AA8F40227988"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8A50C87E-68F1-449E-8111-4082CD9BBCA9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-164","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-38375","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.797","lastModified":"2026-06-17T04:56:29.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization vulnerability [CWE-285]  in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:48.274436Z","id":"CVE-2022-38375","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndExcluding":"9.2.7","matchCriteriaId":"1AA31846-D095-4DC1-8FFC-B28447054A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.2","matchCriteriaId":"84AEE221-36B9-41D6-A09F-B0D81AA79576"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.0","matchCriteriaId":"C3979307-56D3-48DC-A09E-8FF75FE38664"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-329","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-38376","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.860","lastModified":"2026-06-17T04:56:29.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9.4.1 allows an attacker to perform an XSS attack via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.7","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.8","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.3.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:36.971265Z","id":"CVE-2022-38376","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"8292B841-851C-42C2-AF13-17AB2FA894CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"9.4.2","matchCriteriaId":"F1ABB0EC-4DF9-4475-A616-F61C3CA6CB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"952F266E-0E48-4D69-81E0-9F813B60AC3E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-273","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-38378","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.930","lastModified":"2026-06-17T04:56:29.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and before 7.0.7 and FortiProxy version 7.2.0 through 7.2.1 and before 7.0.7 allows an attacker that has access to the admin profile section (System subsection Administrator Users) to modify their own profile and upgrade their privileges to Read Write via CLI or GUI commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.11","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:33.317354Z","id":"CVE-2022-38378","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"2.0.9","matchCriteriaId":"41A9C3D8-28F8-4E91-9C6A-05DB343F1ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"81E60913-FBE9-467B-AB4B-CA85E97527BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"F5B24750-4A57-4F80-AAE8-8AC316B376C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"5056BFD5-9618-44FC-98E8-C4DA386F9925"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.1","matchCriteriaId":"A7E1421F-A467-41FE-9065-1512008E942D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-346","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-39948","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:12.993","lastModified":"2026-06-17T04:58:34.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions and FortiProxy 7.0.0 through 7.0.6, 2.0 all versions, 1.2 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the FortiOS/FortiProxy device and remote servers hosting threat feeds (when the latter are configured as Fabric connectors in FortiOS/FortiProxy)"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.11","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:34.434332Z","id":"CVE-2022-39948","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"2.0.9","matchCriteriaId":"247BFEDF-2B1D-4E1F-A699-3BEDD4B63EA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"B778AD94-D279-42B4-A062-8231F14936B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"5056BFD5-9618-44FC-98E8-C4DA386F9925"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-257","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-39952","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.060","lastModified":"2026-06-17T04:58:34.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.5","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.7","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.3.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:10.326522Z","id":"CVE-2022-39952","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-73"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-668"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.7","versionEndIncluding":"8.8.9","matchCriteriaId":"DFBBFCB8-B202-4B8E-9C6A-9FD080493761"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndExcluding":"9.1.8","matchCriteriaId":"7BF7BE0D-2C93-4CA7-B1AD-B3C019B851D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndExcluding":"9.2.6","matchCriteriaId":"F62A2710-F28E-4F13-8916-4C743869B2D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.1","matchCriteriaId":"21A790F2-B3CD-4C23-9777-BB92982A101C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-300","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-39954","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.120","lastModified":"2026-06-17T04:58:34.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC version 9.1.0 through 9.1.8, FortiNAC version 8.8.0 through 8.8.11, FortiNAC version 8.7.0 through 8.7.6, FortiNAC version 8.6.0 through 8.6.5, FortiNAC version 8.5.0 through 8.5.4, FortiNAC version 8.3.7 allows attacker to read arbitrary files or trigger a denial of service via specifically crafted XML documents."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.7","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.8","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.3.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:46.786394Z","id":"CVE-2022-39954","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-611"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-611"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.7","versionEndIncluding":"9.2.7","matchCriteriaId":"B1A805AE-3A46-4F20-8F7D-7E9E8EE609D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.2","matchCriteriaId":"84AEE221-36B9-41D6-A09F-B0D81AA79576"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.0","matchCriteriaId":"C3979307-56D3-48DC-A09E-8FF75FE38664"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-304","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-40675","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.187","lastModified":"2026-06-17T05:01:49.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an attacker to decrypt and forge protocol communication messages."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.7","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.8","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.3.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:45.634338Z","id":"CVE-2022-40675","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.7","versionEndIncluding":"9.2.7","matchCriteriaId":"B1A805AE-3A46-4F20-8F7D-7E9E8EE609D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.2","matchCriteriaId":"84AEE221-36B9-41D6-A09F-B0D81AA79576"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.0","matchCriteriaId":"C3979307-56D3-48DC-A09E-8FF75FE38664"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-312","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-40677","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.250","lastModified":"2026-06-17T05:01:49.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of argument delimiters in a command ('argument injection') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 allows attacker to execute unauthorized code or commands via specially crafted input parameters."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.5","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.7","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.3.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:38.204687Z","id":"CVE-2022-40677","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-88"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"8292B841-851C-42C2-AF13-17AB2FA894CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"95E75B88-1750-4FB6-BCE4-74B69D93C918"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"8.7.6","matchCriteriaId":"3BD32B25-76B4-4D6E-BB5C-065070297058"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndIncluding":"8.8.11","matchCriteriaId":"46929BE3-0396-4B8A-9889-9F6CA73FAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.7","matchCriteriaId":"33085C12-F572-4AE1-B286-978A274A8E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.5","matchCriteriaId":"561003C4-0B6E-4088-8272-03C6574B83F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"952F266E-0E48-4D69-81E0-9F813B60AC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E12E11B0-E21A-4124-9DF9-FF268BB19813"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-280","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-40678","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.313","lastModified":"2026-06-17T05:01:49.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow a local attacker with database access to recover user passwords."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.5","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.7","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.3.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.4,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:39.590106Z","id":"CVE-2022-40678","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-522"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"8292B841-851C-42C2-AF13-17AB2FA894CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"95E75B88-1750-4FB6-BCE4-74B69D93C918"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"8.7.6","matchCriteriaId":"3BD32B25-76B4-4D6E-BB5C-065070297058"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndIncluding":"8.8.11","matchCriteriaId":"46929BE3-0396-4B8A-9889-9F6CA73FAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.7","matchCriteriaId":"33085C12-F572-4AE1-B286-978A274A8E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.5","matchCriteriaId":"561003C4-0B6E-4088-8272-03C6574B83F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"952F266E-0E48-4D69-81E0-9F813B60AC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E12E11B0-E21A-4124-9DF9-FF268BB19813"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-265","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-40683","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.377","lastModified":"2026-06-17T05:01:50.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:36.982306Z","id":"CVE-2022-40683","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-415"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"E0A5759C-0866-4EC4-9F15-9E5A69DD3A86"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-348","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-41334","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.443","lastModified":"2026-06-17T05:03:02.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS versions 7.0.0 to 7.0.7 and 7.2.0 to 7.2.3 may allow a remote, unauthenticated attacker to launch a cross site scripting (XSS) attack via the \"redir\" parameter of the URL seen when the \"Sign in with FortiCloud\" button is clicked."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:43.722511Z","id":"CVE-2022-41334","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"DEC5CAD3-53CB-45C3-B4EA-10AEFE6C0016"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"813E179E-B948-4480-A5B1-B0ED562A41BC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-224","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-41335","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.513","lastModified":"2026-06-17T05:03:03.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, FortiProxy version 7.2.0 through 7.2.1, 7.0.0 through 7.0.7 and before 2.0.10, FortiSwitchManager 7.2.0 and before 7.0.0  allows an authenticated attacker to read and write files on the underlying Linux system via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.11","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThan":"1.2.*","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThan":"1.1.*","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThan":"1.0.*","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:12:00.557237Z","id":"CVE-2022-41335","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5B4A6B0D-1614-443B-8EBA-A8FBC2E1A832"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2B73D78B-2270-45B7-854E-F985B8D88F3B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.10","matchCriteriaId":"03222066-2B1D-4854-8CAE-6992D7F40150"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"3F3A99BB-534C-4984-948B-8FFF659A9B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"20B53FFE-073D-43E9-9D6F-9C86937C0228"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.10","matchCriteriaId":"FF6F9869-F824-4519-986E-A032668EA7BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"0983FC2C-A9F2-4918-81E6-BDCF05E5BF65"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8B736A23-95B8-4D87-863A-AC8E901078EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F5CE1D01-26C0-4141-B7B1-E26B976DF835"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-391","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42472","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.583","lastModified":"2026-10-22T14:17:27.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of crlf sequences in http headers ('http response splitting') vulnerability in Fortinet FortiOS 7.2.0 through 7.2.2, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0.0 through 2.0.10, FortiProxy 1.2 all versions, FortiProxy 01.02 all versions, FortiProxy 1.1 all versions, FortiProxy 01.01 all versions may allow an authenticated and remote attacker to perform an HTTP request splitting attack which gives attackers control of the remaining headers and body of the response."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.10","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:31.990875Z","id":"CVE-2022-42472","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-113"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-74"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.10","matchCriteriaId":"03222066-2B1D-4854-8CAE-6992D7F40150"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"3F3A99BB-534C-4984-948B-8FFF659A9B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.1","versionEndIncluding":"6.0.16","matchCriteriaId":"1279D1CF-6815-4491-AC1C-54C64C2F5FC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"20B53FFE-073D-43E9-9D6F-9C86937C0228"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.11","matchCriteriaId":"A87D865A-6411-4807-81D4-6A5C052C03C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"0983FC2C-A9F2-4918-81E6-BDCF05E5BF65"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8B736A23-95B8-4D87-863A-AC8E901078EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F5CE1D01-26C0-4141-B7B1-E26B976DF835"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-362","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-43954","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.650","lastModified":"2026-06-17T05:07:32.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal management interface 7.0.0 through 7.0.2 may allow a remote authenticated attacker to read other devices' passwords in the audit log page."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:43.913620Z","id":"CVE-2022-43954","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5B6AC446-7A55-4C21-87F0-9EE9958E1C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D011011-C5FD-437D-8551-15F54DE8602F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"28CE4B70-A451-43F7-B4D9-3EF4D4F5546E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-430","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-22638","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:13.977","lastModified":"2026-06-17T05:35:47.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Several improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC  9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11 and below, 8.7.6 and below, 8.6.5 and below, 8.5.4 and below, 8.3.7 and below may allow an authenticated attacker to perform several XSS attacks via crafted HTTP GET requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.7","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.8","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.3.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:35.344234Z","id":"CVE-2023-22638","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"8292B841-851C-42C2-AF13-17AB2FA894CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"95E75B88-1750-4FB6-BCE4-74B69D93C918"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"8.7.6","matchCriteriaId":"3BD32B25-76B4-4D6E-BB5C-065070297058"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndIncluding":"8.8.11","matchCriteriaId":"46929BE3-0396-4B8A-9889-9F6CA73FAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.9","matchCriteriaId":"D101F116-0C73-401E-9882-8BA2F403FA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.7","matchCriteriaId":"B341AE7E-48F1-4ABE-891F-F9D543D19E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"952F266E-0E48-4D69-81E0-9F813B60AC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E12E11B0-E21A-4124-9DF9-FF268BB19813"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4648F862-AB8C-4B8D-8F2D-5D2641F08845"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-260","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-23778","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:14.120","lastModified":"2026-06-17T05:37:57.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated user to obtain unauthorized access to files and data via specifically crafted web requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.21","versionType":"semver","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:38.180562Z","id":"CVE-2023-23778","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.3","versionEndIncluding":"6.2.7","matchCriteriaId":"6BEC9155-F85D-4E82-903C-001822686BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.21","matchCriteriaId":"2B368CF5-3A17-476C-BD57-887230A17A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6775BE1F-184A-45D2-9D8D-AA8F40227988"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8A50C87E-68F1-449E-8111-4082CD9BBCA9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-142","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-23779","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:14.187","lastModified":"2026-06-17T05:37:57.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.19","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:45.190406Z","id":"CVE-2023-23779","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndIncluding":"6.3.19","matchCriteriaId":"2D8BD0BB-6CD4-4340-9271-E774DF35FA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"74A92A08-E6F6-4522-A6DA-061950AD3525"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6A3D2C4-C3FA-4E12-9156-DAFEA4E00BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6775BE1F-184A-45D2-9D8D-AA8F40227988"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8A50C87E-68F1-449E-8111-4082CD9BBCA9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-133","source":"psirt@fortinet.com","tags":["Product"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2023-23780","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:14.250","lastModified":"2026-06-17T05:37:57.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all versions allows attacker to escalation of privilege via specifically crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.19","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:55.673303Z","id":"CVE-2023-23780","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.20","matchCriteriaId":"1EC1014F-44DE-4FC7-B0A7-82BEA9A443F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"F6B93ABE-8620-4253-83C0-3D2228D20118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"9054E8B0-2CF0-4DD3-8D5A-34C399F7C20D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-118","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-23781","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:14.317","lastModified":"2026-06-17T05:37:57.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML server configuration may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted XML files."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.19","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:50.383123Z","id":"CVE-2023-23781","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.20","matchCriteriaId":"1EC1014F-44DE-4FC7-B0A7-82BEA9A443F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"F6B93ABE-8620-4253-83C0-3D2228D20118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"9054E8B0-2CF0-4DD3-8D5A-34C399F7C20D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-151","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-23782","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:14.383","lastModified":"2026-06-17T05:37:57.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically crafted arguments to existing commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.19","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.3","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:52.337464Z","id":"CVE-2023-23782","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.2.7","matchCriteriaId":"906A573F-4734-453E-B9F1-320CE979A0F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.20","matchCriteriaId":"1EC1014F-44DE-4FC7-B0A7-82BEA9A443F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"F6B93ABE-8620-4253-83C0-3D2228D20118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"9054E8B0-2CF0-4DD3-8D5A-34C399F7C20D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-111","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-23783","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:14.450","lastModified":"2026-10-28T19:10:00.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments."},{"lang":"es","value":"Un uso de cadena de formato controlada externamente en Fortinet FortiWeb versiones 7.0.0 a 7.0.1, FortiWeb 6.4 en todas sus versiones permite al atacante ejecutar código o comandos no autorizados a través de argumentos de comando especialmente diseñados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:54.179721Z","id":"CVE-2023-23783","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"C97F7E3F-4747-46AA-8D2C-5D7C363CDB14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"9054E8B0-2CF0-4DD3-8D5A-34C399F7C20D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-187","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-23784","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:14.517","lastModified":"2026-06-17T05:37:57.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to information disclosure via specially crafted web requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.20","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.7,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:39.321012Z","id":"CVE-2023-23784","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndExcluding":"6.3.21","matchCriteriaId":"065777FA-70C7-418D-924E-379840F3C46B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"F6B93ABE-8620-4253-83C0-3D2228D20118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"A9851C39-C7A5-4E0F-BF5D-0E3D2D36AAAE"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-251","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-25602","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-16T19:15:14.583","lastModified":"2026-06-17T05:41:35.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earlier, FortiWeb versions 6.1.2 and earlier, FortiWeb versions 6.0.7 and earlier, FortiWeb versions 5.9.1 and earlier, FortiWeb 5.8 all versions, FortiWeb 5.7 all versions, FortiWeb 5.6 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.17","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"},{"version":"5.9.0","lessThanOrEqual":"5.9.1","versionType":"semver","status":"affected"},{"version":"5.8.5","lessThanOrEqual":"5.8.7","versionType":"semver","status":"affected"},{"version":"5.8.0","lessThanOrEqual":"5.8.3","versionType":"semver","status":"affected"},{"version":"5.7.0","lessThanOrEqual":"5.7.3","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:56.827430Z","id":"CVE-2023-25602","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"5.9.2","matchCriteriaId":"E8FDE2B1-1E8E-4DA7-B545-487914EF232D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.8","matchCriteriaId":"8BE261E5-059D-4B89-893A-458E0B40CFD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"6.1.3","matchCriteriaId":"9EFA8AB9-2777-471C-A1DA-635BDACE2F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.7","matchCriteriaId":"919112F8-1479-45F0-BE4D-91112143D2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.18","matchCriteriaId":"5433933C-D06F-4325-B9D4-392D8A866813"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"F6B93ABE-8620-4253-83C0-3D2228D20118"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-234","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-22636","sourceIdentifier":"psirt@fortinet.com","published":"2023-02-27T09:15:09.267","lastModified":"2026-06-17T05:35:46.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allow a local attacker to access confidential configuration files via a crafted http request."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.21","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:32.676014Z","id":"CVE-2023-22636","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndIncluding":"6.3.21","matchCriteriaId":"1015CCDD-15E5-4E64-8D0B-4BE77459FD8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"F6B93ABE-8620-4253-83C0-3D2228D20118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.4","matchCriteriaId":"8A569BDB-622C-43C5-8CA9-6CF8DCBA055E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-460","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22297","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:11.707","lastModified":"2026-06-17T04:28:11.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versions 6.1, FortiWeb all versions 6.0, FortiRecorder version 6.4.0 through 6.4.3, FortiRecorder all versions 6.0, FortiRecorder all versions 2.7 may allow an authenticated user to read arbitrary files via specially crafted command arguments."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"},{"version":"2.7.0","lessThanOrEqual":"2.7.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.17","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.3","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:25.909669Z","id":"CVE-2022-22297","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-792"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.8","matchCriteriaId":"DA69D7D6-9798-4E8C-983A-6632D665175C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.3","matchCriteriaId":"FAA01761-B03C-498C-8749-CD1289E37A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.7","matchCriteriaId":"2DBCF4EF-986E-4F59-8D6D-01AB0D783091"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.17","matchCriteriaId":"A846394C-F57F-432B-AEE0-F2FB576A55FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.3","matchCriteriaId":"AF5ED7B3-39F3-49FD-82D9-72CAB2D68636"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7.0","versionEndIncluding":"2.7.7","matchCriteriaId":"1D08AB84-92D4-4E2E-A1C6-F6C9856E81B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"5CE6D7BA-0B60-42EF-BDE0-1E548794C145"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.3","matchCriteriaId":"E50EDA13-6FCE-4D96-9B3B-80D3B5814202"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-218","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-27490","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:11.793","lastModified":"2026-06-17T04:37:06.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, FortiPortal version 6.0.0 through 6.0.9, 5.3.0 through 5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4.1.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.x, 6.0.x allows an attacker which has obtained access to a restricted administrative account to obtain sensitive information via `diagnose debug` commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.9","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.8","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.6","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.2","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.3","versionType":"semver","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.2","versionType":"semver","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitch","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:24.164388Z","id":"CVE-2022-27490","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.11","matchCriteriaId":"F405CC91-9EDE-43F4-ACB3-5744F0FAB7BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"FA8E8156-7599-413E-9F09-A4E92362E191"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.11","matchCriteriaId":"BC5BB5B9-7C51-4840-9D25-DA41C0EF16C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"CD13669B-47CA-41CA-8D0A-514AEFD68FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.2","matchCriteriaId":"38B071DD-7C34-4EDC-9D87-EE0C32DA8256"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.2","matchCriteriaId":"D1E4F9F9-1BF0-4DA3-A5DE-D770BD40D324"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.3","matchCriteriaId":"4AE4255A-A854-4A11-8860-A558E1D77F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.2","matchCriteriaId":"6F09B0F2-D95C-478B-9AA2-CCE1D2D1E497"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.6","matchCriteriaId":"51CAE1B0-E321-462F-B503-2C13AEF3DAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.8","matchCriteriaId":"44C143C2-D850-4768-94D0-55615D670A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.9","matchCriteriaId":"8835F5DA-F19B-473E-AA9D-D6C7E8948A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"843F4434-651D-4A22-80C3-77397E059A98"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.7","matchCriteriaId":"549EE910-DAC4-45B7-AE45-6B6A786CD2F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.10","matchCriteriaId":"4EAE583E-5D26-4224-AB58-DC3E4A6EA505"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.4","matchCriteriaId":"2681D458-EE55-478D-92D1-C6BB7BB3BAC4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-18-232","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-18-232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-39951","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:11.877","lastModified":"2026-06-17T04:58:34.347","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specifically crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.20","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:31.439982Z","id":"CVE-2022-39951","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndIncluding":"6.3.20","matchCriteriaId":"E1D7A0C0-513C-4C92-9269-3149C52FE488"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"F6B93ABE-8620-4253-83C0-3D2228D20118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"CC0C5E6A-1C16-4A7F-9C2A-11B60560A05D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-254","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-39953","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:11.943","lastModified":"2026-06-17T04:58:34.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1.0 through 9.1.8, FortiNAC all versions 8.8, FortiNAC all versions 8.7, FortiNAC all versions 8.6, FortiNAC all versions 8.5, FortiNAC version 8.3.7 allows attacker to escalation of privilege via specially crafted commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.6","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.8","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.3.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:30.278524Z","id":"CVE-2022-39953","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"8292B841-851C-42C2-AF13-17AB2FA894CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"95E75B88-1750-4FB6-BCE4-74B69D93C918"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"8.7.6","matchCriteriaId":"3BD32B25-76B4-4D6E-BB5C-065070297058"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndIncluding":"8.8.11","matchCriteriaId":"46929BE3-0396-4B8A-9889-9F6CA73FAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.8","matchCriteriaId":"4DFD62C8-07EF-4C7C-B18B-414A9C4A2955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.6","matchCriteriaId":"9331C47E-0CA4-4B2F-A89F-5C0AAEF3ECAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"952F266E-0E48-4D69-81E0-9F813B60AC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E12E11B0-E21A-4124-9DF9-FF268BB19813"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4648F862-AB8C-4B8D-8F2D-5D2641F08845"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-309","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-40676","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:12.020","lastModified":"2026-06-17T05:01:49.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 allows attacker to execute unauthorized code or commands via specially crafted http requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.5","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.8","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.3.7","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:29.023466Z","id":"CVE-2022-40676","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"8292B841-851C-42C2-AF13-17AB2FA894CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"95E75B88-1750-4FB6-BCE4-74B69D93C918"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"8.7.6","matchCriteriaId":"3BD32B25-76B4-4D6E-BB5C-065070297058"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndIncluding":"8.8.11","matchCriteriaId":"46929BE3-0396-4B8A-9889-9F6CA73FAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.8","matchCriteriaId":"4DFD62C8-07EF-4C7C-B18B-414A9C4A2955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.5","matchCriteriaId":"561003C4-0B6E-4088-8272-03C6574B83F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"952F266E-0E48-4D69-81E0-9F813B60AC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E12E11B0-E21A-4124-9DF9-FF268BB19813"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-281","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-41328","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:12.093","lastModified":"2026-06-17T05:03:02.417","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:25:59.359904Z","id":"CVE-2022-41328","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2023-03-14","cisaActionDue":"2023-04-04","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet FortiOS Path Traversal Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.16","matchCriteriaId":"8EA5512D-6EE5-4DF3-A960-C02394F25225"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.14","matchCriteriaId":"D539CF21-2985-4E9B-94E8-E0B696752291"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.12","matchCriteriaId":"D4AA72D9-CD66-4628-92B5-6CDFCB8E0EEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.10","matchCriteriaId":"8EB54D85-8A3B-4F40-A814-3636F2AC99F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-369","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-41328","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2022-41329","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:12.163","lastModified":"2026-06-17T05:03:02.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9 allows an unauthenticated attackers to obtain sensitive logging informations on the device via crafted HTTP GET requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:40.630242Z","id":"CVE-2022-41329","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"C83139FA-7195-4171-8BC6-CC4F9379C7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.2","matchCriteriaId":"57AD1A53-1D86-4707-B63C-49E1633179AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.3","versionEndIncluding":"6.2.13","matchCriteriaId":"0087A620-D709-4771-B03E-3D5F0DCBC261"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.11","matchCriteriaId":"A87D865A-6411-4807-81D4-6A5C052C03C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"9E775D02-7C02-40BE-A118-D874B9BBC936"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"813E179E-B948-4480-A5B1-B0ED562A41BC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-364","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-41333","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:12.233","lastModified":"2026-06-17T05:03:02.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:42.609720Z","id":"CVE-2022-41333","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"773125D4-60A6-47B4-A930-27F105D8319F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.3","matchCriteriaId":"E50EDA13-6FCE-4D96-9B3B-80D3B5814202"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/171766/FortiRecorder-6.4.3-Denial-Of-Service.html","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/psirt/FG-IR-22-388","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/171766/FortiRecorder-6.4.3-Denial-Of-Service.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://fortiguard.com/psirt/FG-IR-22-388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42476","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:12.303","lastModified":"2026-10-22T14:17:29.667","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.12, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0.0 through 2.0.11, FortiProxy 1.2 all versions, FortiProxy 01.02 all versions, FortiProxy 1.1 all versions, FortiProxy 01.01 all versions allows privileged VDOM administrators to escalate their privileges to super admin of the box via crafted CLI requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.11","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:27.802267Z","id":"CVE-2022-42476","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.11","matchCriteriaId":"6607C71D-D434-430A-8DFD-9125381D2D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"3F3A99BB-534C-4984-948B-8FFF659A9B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"20B53FFE-073D-43E9-9D6F-9C86937C0228"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.11","matchCriteriaId":"A87D865A-6411-4807-81D4-6A5C052C03C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"0983FC2C-A9F2-4918-81E6-BDCF05E5BF65"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"813E179E-B948-4480-A5B1-B0ED562A41BC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-401","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-45861","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:12.380","lastModified":"2026-06-17T05:10:53.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.11 and FortiProxy version 7.2.0 through 7.2.1, version 7.0.0 through 7.0.7 and before 2.0.11 allows a remote authenticated attacker to crash the sslvpn daemon via an HTTP GET request."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.11","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.5","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:22.883912Z","id":"CVE-2022-45861","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-824"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-824"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.11","matchCriteriaId":"6607C71D-D434-430A-8DFD-9125381D2D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"3F3A99BB-534C-4984-948B-8FFF659A9B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"19FD3769-7C9A-4570-A284-34CB19672108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"74FB2CB1-DBDB-4CA6-A98C-08ACE0044CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.13","matchCriteriaId":"3CD57A5A-2B13-495A-8530-8F97E1720602"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.11","matchCriteriaId":"A87D865A-6411-4807-81D4-6A5C052C03C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"9E775D02-7C02-40BE-A118-D874B9BBC936"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"813E179E-B948-4480-A5B1-B0ED562A41BC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-477","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-23776","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:12.630","lastModified":"2026-06-17T05:37:56.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated  attacker to read the client machine password in plain text in a heartbeat response when a log-fetch request is made from the FortiAnalyzer"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:27.059675Z","id":"CVE-2023-23776","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.11","matchCriteriaId":"5E874113-99A5-4D9B-9F0E-CC6D39860A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"930919B2-1DF9-4216-8245-8C0F3F137C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"12767150-C085-41ED-A645-83BFE7E846E8"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-447","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-25605","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:12.810","lastModified":"2026-06-17T05:41:35.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","versions":[{"version":"7.3.0","lessThanOrEqual":"7.3.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:43.971677Z","id":"CVE-2023-25605","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.2","matchCriteriaId":"E640925A-832A-4458-9322-F8753C66A1F0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-050","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-25611","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-07T17:15:12.877","lastModified":"2026-06-17T05:41:36.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 - 7.2.1 allows local attacker to execute unauthorized code or commands via inserting spreadsheet formulas in macro names."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:28.401664Z","id":"CVE-2023-25611","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1236"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-1236"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.6","matchCriteriaId":"89B689BE-2A20-45B3-9BD0-6AEE64140673"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"12767150-C085-41ED-A645-83BFE7E846E8"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-488","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-29056","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-09T15:15:09.020","lastModified":"2026-06-17T04:39:31.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before 6.0.9 allows  a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","versions":[{"version":"6.4.0","status":"affected"},{"version":"6.2.1","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.9","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:21.685042Z","id":"CVE-2022-29056","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.10","matchCriteriaId":"1F99B304-8B86-424C-8548-7DD5A0A901E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1","versionEndExcluding":"6.2.5","matchCriteriaId":"E2FCBF49-700D-4154-B7FD-1DAE61C867CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"60F5771F-D563-48A6-8A8C-FFF518AD376E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-078","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-26208","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-09T15:15:09.637","lastModified":"2026-06-17T05:42:49.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows  a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.6","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:20.330286Z","id":"CVE-2023-26208","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndExcluding":"6.5.0","matchCriteriaId":"3920D43C-F957-488D-819F-D3001ED216AC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-078","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-26209","sourceIdentifier":"psirt@fortinet.com","published":"2023-03-09T15:15:09.720","lastModified":"2026-06-17T05:42:49.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and before allows  a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDeceptor","defaultStatus":"unaffected","versions":[{"version":"3.1.0","lessThanOrEqual":"3.1.1","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.2","versionType":"semver","status":"affected"},{"version":"2.1.0","status":"affected"},{"version":"2.0.0","status":"affected"},{"version":"1.1.0","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:19.121715Z","id":"CVE-2023-26209","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"3.2.0","matchCriteriaId":"3552EB07-FD6F-499D-BF18-DB4365FAAF57"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-078","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-27485","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.130","lastModified":"2026-06-17T04:37:06.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in Fortinet FortiSandbox version 4.2.0, 4.0.0 through 4.0.2, 3.2.0 through 3.2.3, 3.1.x and 3.0.x allows a remote and authenticated attacker with read permission to retrieve arbitrary files from the underlying Linux system via a crafted HTTP request."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","versions":[{"version":"4.2.0","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.3","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.1","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:13.988162Z","id":"CVE-2022-27485","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.1","versionEndIncluding":"3.0.7","matchCriteriaId":"AF8BA034-3CD8-4AE7-AAE1-5E12435F6E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.2.4","matchCriteriaId":"4B43C486-DC53-4F71-A3D4-EA1863A99060"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"4AD1B101-4071-480C-AF8A-AE66FF92D589"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"AB56C6F6-9FE4-4FAF-8AEC-A1C6205F94C5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-060","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-27487","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.193","lastModified":"2026-06-17T04:37:06.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before 3.2.3 and FortiDeceptor version 4.1.0, 4.0.0 through 4.0.2 and before 3.3.3 allows a remote authenticated attacker to perform unauthorized API calls via crafted HTTP or HTTPS requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDeceptor","defaultStatus":"unaffected","versions":[{"version":"4.1.0","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.3","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.2","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.1","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.2","versionType":"semver","status":"affected"},{"version":"2.1.0","status":"affected"},{"version":"2.0.0","status":"affected"},{"version":"1.1.0","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","versions":[{"version":"4.2.0","lessThanOrEqual":"4.2.2","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.3","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"},{"version":"2.5.0","lessThanOrEqual":"2.5.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:12.648760Z","id":"CVE-2022-27487","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndExcluding":"3.3.3","matchCriteriaId":"39B4357A-55DD-498F-B4B2-68A77285612B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.2","matchCriteriaId":"16BF9690-3D39-4FCC-A314-68C17E1E0892"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"48655ECC-C9A9-4AD9-993B-7B2965E9266F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndExcluding":"3.2.4","matchCriteriaId":"30C67A05-44FD-462B-BC47-2EAE11358063"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"4AD1B101-4071-480C-AF8A-AE66FF92D589"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.3","matchCriteriaId":"4C401836-2D68-4CA3-8735-D9EC9DDB15F6"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-056","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-35850","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.250","lastModified":"2026-06-17T04:52:24.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versions 6.4.0 through 6.4.4, 6.3.0 through 6.3.3, all versions of 6.2 and 6.1 may allow a remote unauthenticated attacker to trigger a reflected cross site scripting (XSS) attack via the \"reset-password\" page."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.2","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:11.120911Z","id":"CVE-2022-35850","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-80"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"6.3.4","matchCriteriaId":"00E0319C-E860-440C-9782-350B5F3EFF42"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.7","matchCriteriaId":"27E756C9-CBAB-42F6-AF27-051FA2098D25"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-275","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-40679","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.297","lastModified":"2026-06-17T05:01:49.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions, 6.0 all versions, 6.1 all versions, 6.2.0 through 6.2.4, 7.0.0 through 7.0.3, 7.1.0; FortiDDoS 4.x all versions, 5.0 all versions, 5.1 all versions, 5.2 all versions, 5.3 all versions, 5.4 all versions, 5.5 all versions, 5.6 all versions and FortiDDoS-F 6.4.0, 6.3.0 through 6.3.3, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDDoS","defaultStatus":"unaffected","versions":[{"version":"5.6.0","lessThanOrEqual":"5.6.1","versionType":"semver","status":"affected"},{"version":"5.5.0","lessThanOrEqual":"5.5.1","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.2","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.1","versionType":"semver","status":"affected"},{"version":"5.2.0","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"},{"version":"4.7.0","status":"affected"},{"version":"4.6.0","status":"affected"},{"version":"4.5.0","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.2","versionType":"semver","status":"affected"},{"version":"4.3.0","lessThanOrEqual":"4.3.2","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.2","versionType":"semver","status":"affected"},{"version":"4.1.1","lessThanOrEqual":"4.1.12","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDDoS-F","defaultStatus":"unaffected","versions":[{"version":"6.4.0","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.2","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.7","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:22.289076Z","id":"CVE-2022-40679","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"6.2.5","matchCriteriaId":"FE3141AC-861F-4B06-B39D-F6DDB998073D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"5.7.0","matchCriteriaId":"F33B8503-AE60-4E4F-B664-C47B3A606C74"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"6.1.5","matchCriteriaId":"C211C719-BCE5-4D78-BD49-846384742B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.3","matchCriteriaId":"29EF3271-456A-431E-A02F-530018A229D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.4","matchCriteriaId":"5E574BD8-00B8-4D6F-9CCF-512E8ECF1D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A9C4E7CA-746B-4542-9E83-AC75C3DAB1FD"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-335","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-40682","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.347","lastModified":"2026-06-17T05:01:50.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to execute unauthorized code or commands via sending a crafted request to a specific named pipe."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:20.987811Z","id":"CVE-2022-40682","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.10","matchCriteriaId":"99B02B5E-89EF-46E5-8EC4-98AC8FB5CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"F7E57B9F-49BC-492A-9F96-C14CF088FDF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"79BA44CE-C6AD-44CD-8BAF-5DAD23F61957"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-336","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-41330","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.390","lastModified":"2026-06-17T05:03:02.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9, version 6.4.0 through 6.4.11 and before 6.2.12 and FortiProxy version 7.2.0 through 7.2.1 and before 7.0.7 allows an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:25.297377Z","id":"CVE-2022-41330","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"81E60913-FBE9-467B-AB4B-CA85E97527BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"F5B24750-4A57-4F80-AAE8-8AC316B376C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.13","matchCriteriaId":"EA0F948E-DC53-4365-B12F-F17B514E3F35"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.12","matchCriteriaId":"D4AA72D9-CD66-4628-92B5-6CDFCB8E0EEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.10","matchCriteriaId":"8EB54D85-8A3B-4F40-A814-3636F2AC99F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-363","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-41331","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.437","lastModified":"2026-06-17T05:03:02.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPresence","defaultStatus":"unaffected","versions":[{"version":"1.2.0","lessThanOrEqual":"1.2.1","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.1","versionType":"semver","status":"affected"},{"version":"1.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:08.963120Z","id":"CVE-2022-41331","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-306"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"2.0.0","matchCriteriaId":"BC692A93-FC05-4E0E-BC40-2798302A2C62"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-355","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42469","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.490","lastModified":"2026-06-17T05:04:58.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and below Policy-based NGFW Mode may allow an authenticated SSL-VPN user to bypass the policy via bookmarks in the web portal."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:12.625808Z","id":"CVE-2022-42469","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-183"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"8870AB06-C50F-452A-952C-30DE7860264E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-381","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42470","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.540","lastModified":"2026-06-17T05:04:59.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to execute unauthorized code or commands via sending a crafted request to a specific named pipe."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:19.821440Z","id":"CVE-2022-42470","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.10","matchCriteriaId":"99B02B5E-89EF-46E5-8EC4-98AC8FB5CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"F7E57B9F-49BC-492A-9F96-C14CF088FDF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"79BA44CE-C6AD-44CD-8BAF-5DAD23F61957"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-320","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42477","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.587","lastModified":"2026-06-17T05:05:01.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:16.874233Z","id":"CVE-2022-42477","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.7","matchCriteriaId":"8EDF316B-9E54-4149-8C81-C7EFBB668B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"319D2F9D-E1E5-49C7-8ABD-0A64D7B05D58"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-432","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-43946","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.637","lastModified":"2026-06-17T05:07:31.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a time-of-check time-of-use (TOCTOU) race condition [CWE-367] vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute commands via writing data into a windows pipe."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:13.825082Z","id":"CVE-2022-43946","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-732"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-367"},{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"9AD2C28A-5900-48DF-AEF3-4FC87E03103A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-429","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-43947","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.693","lastModified":"2026-06-17T05:07:31.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiOS version 7.2.0 through 7.2.3 and before 7.0.10, FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 administrative interface allows an attacker with a valid user account to perform brute-force attacks on other user accounts via injecting valid login sessions."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.12","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:15.478464Z","id":"CVE-2022-43947","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"2.0.9","matchCriteriaId":"040866D8-0D44-4EC2-8801-5F50E51A7CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"81E60913-FBE9-467B-AB4B-CA85E97527BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"F5B24750-4A57-4F80-AAE8-8AC316B376C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.4.13","matchCriteriaId":"AB0B7CC5-F5D8-4912-84BE-2F1D010B97B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"8870AB06-C50F-452A-952C-30DE7860264E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-444","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-43948","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.740","lastModified":"2026-06-17T05:07:31.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.3, FortiADC version 7.1.0 through 7.1.1, FortiADC version 7.0.0 through 7.0.3, FortiADC 6.2 all versions, FortiADC 6.1 all versions, FortiADC 6.0 all versions, FortiADC 5.4 all versions, FortiADC 5.3 all versions, FortiADC 5.2 all versions, FortiADC 5.1 all versions allows attacker to execute unauthorized code or commands via specifically crafted arguments to existing commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:18.385998Z","id":"CVE-2022-43948","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndExcluding":"6.2.6","matchCriteriaId":"AAADA2B2-9FE3-416B-977F-2B82974C47C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"001D264D-17BD-4DB5-9792-D6849F63B9D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndExcluding":"7.1.2","matchCriteriaId":"30963483-E0D5-4B71-B649-79194ACC77BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"D3B876BA-E532-4672-A4E8-F3456B683E37"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-186","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-43951","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.787","lastModified":"2026-06-17T05:07:32.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11 and below, 8.7.6 and below may allow an unauthenticated attacker to access sensitive information via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.7","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.9","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:39.451206Z","id":"CVE-2022-43951","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"9.2.7","matchCriteriaId":"2638973E-2258-4D0F-AF28-36D63652141D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.2","matchCriteriaId":"84AEE221-36B9-41D6-A09F-B0D81AA79576"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.0","matchCriteriaId":"C3979307-56D3-48DC-A09E-8FF75FE38664"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-409","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-43952","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.847","lastModified":"2026-06-17T05:07:32.467","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC version 7.1.1 and below, version 7.0.3 and below, version 6.2.5 and below may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","baseScore":3.5,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:16.744486Z","id":"CVE-2022-43952","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.6","matchCriteriaId":"05F6D507-CDA9-4494-96CD-8C3713B58BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"001D264D-17BD-4DB5-9792-D6849F63B9D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndExcluding":"7.1.2","matchCriteriaId":"30963483-E0D5-4B71-B649-79194ACC77BF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-439","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-43955","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:07.907","lastModified":"2026-06-17T05:07:32.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation [CWE-79] in the FortiWeb web interface 7.0.0 through 7.0.3, 6.3.0 through 6.3.21, 6.4 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow an unauthenticated and remote attacker to perform a reflected cross site scripting attack (XSS) via injecting malicious payload in log entries used to build report."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.21","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.3","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:14.965625Z","id":"CVE-2022-43955","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.2.7","matchCriteriaId":"906A573F-4734-453E-B9F1-320CE979A0F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.22","matchCriteriaId":"C942CAD1-EEAF-494D-9326-3B0F3E849BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"F6B93ABE-8620-4253-83C0-3D2228D20118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"D3B876BA-E532-4672-A4E8-F3456B683E37"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-428","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-22635","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:08.043","lastModified":"2026-06-17T05:35:46.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions,  6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions may allow a local attacker to escalate their privileges via modifying the installer upon upgrade."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.1","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"},{"version":"5.6.5","lessThanOrEqual":"5.6.6","versionType":"semver","status":"affected"},{"version":"5.6.3","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.1","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.4","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.6","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.10","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":5.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:26.445933Z","id":"CVE-2023-22635","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-494"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-494"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"5.6.6","matchCriteriaId":"9042C015-3FBF-43C0-9E0A-10C761AF1B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.4.10","matchCriteriaId":"38117A67-11E8-4928-8450-E9B85265747A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"C1EA50D1-71A4-4687-B921-54B66A1E1BBF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-481","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-22641","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:08.100","lastModified":"2026-06-17T05:35:47.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.9, FortiOS versions 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.2, FortiProxy version 7.0.0 through 7.0.8, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows an authenticated attacker to execute unauthorized code or commands via specially crafted requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.12","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:17.850726Z","id":"CVE-2023-22641","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"2.0.12","matchCriteriaId":"176E9BB3-EAC8-48BF-B7E0-B5F1A59DB01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"E9463F12-5733-4BBD-9A19-FAF05E3F8686"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"2DE32DAA-88FE-4134-84CC-8C071F92D5F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.13","matchCriteriaId":"0C012F20-C335-46E8-B626-1634DB044942"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"8870AB06-C50F-452A-952C-30DE7860264E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-479","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-22642","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:08.150","lastModified":"2026-06-17T05:35:47.720","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the remote FortiGuard server hosting outbreakalert ressources."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.4.8","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThan":"6.4.*","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.4.8","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThan":"6.4.*","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:11.302706Z","id":"CVE-2023-22642","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.8","versionEndExcluding":"6.4.11","matchCriteriaId":"95A5C854-E6E1-4DEA-943C-BD30D03C30FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"C6E67CE7-98F2-47E5-84DE-401CB95800AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"12767150-C085-41ED-A645-83BFE7E846E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.8","versionEndExcluding":"6.4.11","matchCriteriaId":"611FEDBD-269C-4C5D-AAAD-D2E90944C07E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"B79A616E-1B6A-4EA9-BF8E-133AD03C1D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"C654DFBA-E3B0-4865-9088-13385A428E78"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-502","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-27995","sourceIdentifier":"psirt@fortinet.com","published":"2023-04-11T17:15:08.197","lastModified":"2026-06-17T05:46:20.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiSOAR 7.3.0 through 7.3.1 allows an authenticated, remote attacker to execute arbitrary code via a crafted payload."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","versions":[{"version":"7.3.0","lessThanOrEqual":"7.3.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:23.807257Z","id":"CVE-2023-27995","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1336"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.2","matchCriteriaId":"E640925A-832A-4458-9322-F8753C66A1F0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-051","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-43950","sourceIdentifier":"psirt@fortinet.com","published":"2023-05-03T22:15:09.417","lastModified":"2026-06-17T05:07:32.207","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, \r\n 8.8 all versions, 8.7 all versions may allow an unauthenticated attacker to redirect users to any arbitrary website via a crafted URL."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.7","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.9","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:07.298715Z","id":"CVE-2022-43950","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndExcluding":"9.4.2","matchCriteriaId":"2A30BF9D-B074-42C5-8C46-15651E379371"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"77DE647F-0252-42E2-8BDD-C98DC899C613"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-407","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-45858","sourceIdentifier":"psirt@fortinet.com","published":"2023-05-03T22:15:15.423","lastModified":"2026-06-17T05:10:52.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all versions, 8.8.0 all versions, 8.7.0 all versions may increase the chances of an attacker to have access to sensitive information or to perform man-in-the-middle attacks."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.6","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.9","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"7.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:05.923955Z","id":"CVE-2022-45858","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndExcluding":"9.1.0","matchCriteriaId":"FDA26803-7075-4ABC-8D2E-246A81FEB80F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndExcluding":"9.2.6","matchCriteriaId":"F62A2710-F28E-4F13-8916-4C743869B2D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.2","matchCriteriaId":"84AEE221-36B9-41D6-A09F-B0D81AA79576"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-452","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-45859","sourceIdentifier":"psirt@fortinet.com","published":"2023-05-03T22:15:15.553","lastModified":"2026-06-17T05:10:52.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all versions may allow a local attacker with system access to retrieve users' passwords."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.6","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.8","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.5,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:08.454234Z","id":"CVE-2022-45859","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-522"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"9.1.8","matchCriteriaId":"C07AF172-49D7-4F20-8A6B-7640C1FE3600"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndExcluding":"9.2.7","matchCriteriaId":"1AA31846-D095-4DC1-8FFC-B28447054A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.2","matchCriteriaId":"84AEE221-36B9-41D6-A09F-B0D81AA79576"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"77DE647F-0252-42E2-8BDD-C98DC899C613"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-456","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-45860","sourceIdentifier":"psirt@fortinet.com","published":"2023-05-03T22:15:15.670","lastModified":"2026-06-17T05:10:52.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in device registration page may allow an unauthenticated attacker to perform password spraying attacks with an increased chance of success."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.2","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.6","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.9","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:37.857189Z","id":"CVE-2022-45860","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1390"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"9.2.6","matchCriteriaId":"D7321AAB-1859-43BE-A84C-92620389287F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.2","matchCriteriaId":"84AEE221-36B9-41D6-A09F-B0D81AA79576"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"77DE647F-0252-42E2-8BDD-C98DC899C613"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-464","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-22637","sourceIdentifier":"psirt@fortinet.com","published":"2023-05-03T22:15:17.337","lastModified":"2026-06-17T05:35:47.013","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in License Management would permit an authenticated attacker to trigger remote code execution via crafted licenses."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.2","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.7","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.9","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:05.236636Z","id":"CVE-2023-22637","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndExcluding":"9.4.3","matchCriteriaId":"FD2141D0-A01A-471E-8FF3-D132897921E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"77DE647F-0252-42E2-8BDD-C98DC899C613"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-013","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-22640","sourceIdentifier":"psirt@fortinet.com","published":"2023-05-03T22:15:17.857","lastModified":"2026-10-22T14:17:29.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:09.946619Z","id":"CVE-2023-22640","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6EAFD6A7-AAC9-4073-9329-F5B1D9835E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"666BE44D-1B17-4B2E-9BA1-3A127CC0E0FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"906F778B-919C-499C-A2D5-4B59F206E430"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.16","matchCriteriaId":"8EA5512D-6EE5-4DF3-A960-C02394F25225"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.14","matchCriteriaId":"D539CF21-2985-4E9B-94E8-E0B696752291"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.12","matchCriteriaId":"D4AA72D9-CD66-4628-92B5-6CDFCB8E0EEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"8870AB06-C50F-452A-952C-30DE7860264E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-475","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-26203","sourceIdentifier":"psirt@fortinet.com","published":"2023-05-03T22:15:18.357","lastModified":"2026-06-17T05:42:48.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions may allow an authenticated attacker to access to the database via shell commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.7","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.9","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"7.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:06.726078Z","id":"CVE-2023-26203","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"9.2.7","matchCriteriaId":"2638973E-2258-4D0F-AF28-36D63652141D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.3","matchCriteriaId":"D2DF0CAE-9209-4DEC-8197-11F9D34D7C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"77DE647F-0252-42E2-8BDD-C98DC899C613"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-520","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-27993","sourceIdentifier":"psirt@fortinet.com","published":"2023-05-03T22:15:18.787","lastModified":"2026-06-17T05:46:20.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:09.935847Z","id":"CVE-2023-27993","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"7.0.5","matchCriteriaId":"E300924D-4F3C-4039-93C8-09DDE5198844"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndExcluding":"7.1.2","matchCriteriaId":"30963483-E0D5-4B71-B649-79194ACC77BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"74B0A112-AA30-4D11-8F36-3DC8A2EBCA16"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-069","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-27999","sourceIdentifier":"psirt@fortinet.com","published":"2023-05-03T22:15:19.200","lastModified":"2026-06-17T05:46:20.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 7.2.0, 7.1.0 through 7.1.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:08.514348Z","id":"CVE-2023-27999","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndExcluding":"7.1.2","matchCriteriaId":"30963483-E0D5-4B71-B649-79194ACC77BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"74B0A112-AA30-4D11-8F36-3DC8A2EBCA16"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-297","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-33877","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:14.420","lastModified":"2026-06-17T04:49:24.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and FortiConverter (Windows) versions 6.2.0 through 6.2.1, 7.0.0 and all versions of 6.0.0 may allow a local authenticated attacker to tamper with files in the installation folder, if FortiClient or FortiConverter is installed in an insecure folder."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiConverter","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:03.300339Z","id":"CVE-2022-33877","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-276"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-276"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"C819FC90-3D14-44CD-B535-CC27E1FC72BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"F85CB8D4-3ED9-4D9B-875E-5A49DDB57955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticonverter:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.3","matchCriteriaId":"6FD18122-8007-49EF-B42A-D71A2EE050C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticonverter:6.2.0:*:*:*:*:windows:*:*","matchCriteriaId":"A3B57132-7A55-4F4A-94CD-5D221B714767"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticonverter:6.2.1:*:*:*:*:windows:*:*","matchCriteriaId":"7B465F34-AF8B-495C-9A18-95F0E1EC51DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticonverter:7.0.0:*:*:*:*:windows:*:*","matchCriteriaId":"64FF6C37-0CF1-4917-B289-CD4E3E81564F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-229","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-39946","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:14.620","lastModified":"2026-06-17T04:58:33.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and below, 9.1 all versions, 8.8 all versions, 8.7 all versions, 8.6 all versions, 8.5 all versions may allow a remote attacker authenticated on the administrative interface to perform unauthorized jsp calls via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.6","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.10","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","baseScore":7.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:04.710076Z","id":"CVE-2022-39946","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"8292B841-851C-42C2-AF13-17AB2FA894CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"95E75B88-1750-4FB6-BCE4-74B69D93C918"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"8.7.6","matchCriteriaId":"3BD32B25-76B4-4D6E-BB5C-065070297058"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndIncluding":"8.8.11","matchCriteriaId":"46929BE3-0396-4B8A-9889-9F6CA73FAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.10","matchCriteriaId":"72F09A9E-3804-43BE-95B8-67418FEF269E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.8","matchCriteriaId":"225F8F74-D68C-444E-87E9-BC8AED05BB42"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E12E11B0-E21A-4124-9DF9-FF268BB19813"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4648F862-AB8C-4B8D-8F2D-5D2641F08845"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6B0251A8-1E8B-4B4A-962F-3E5950601814"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-332","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-41327","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:14.960","lastModified":"2026-06-17T05:03:02.303","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in order to obtain other adminstrators cookies via diagnose CLI commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:11:01.701994Z","id":"CVE-2022-41327","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-319"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"3F3A99BB-534C-4984-948B-8FFF659A9B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"0983FC2C-A9F2-4918-81E6-BDCF05E5BF65"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-380","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42474","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:15.597","lastModified":"2026-06-17T05:04:59.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged attacker to delete arbitrary directories from the filesystem through crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.11","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:03.538716Z","id":"CVE-2022-42474","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.11","matchCriteriaId":"6607C71D-D434-430A-8DFD-9125381D2D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"3F3A99BB-534C-4984-948B-8FFF659A9B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5B4A6B0D-1614-443B-8EBA-A8FBC2E1A832"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"331A1766-4EBA-4519-A8ED-E0DD68A187E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2B73D78B-2270-45B7-854E-F985B8D88F3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"469E9E1C-154C-41CB-AC83-FBE5E6FA83EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.12","matchCriteriaId":"5E99B6E5-7EC3-406C-AFAC-A5E32DE266DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"9E775D02-7C02-40BE-A118-D874B9BBC936"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"813E179E-B948-4480-A5B1-B0ED562A41BC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-393","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-42478","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:15.653","lastModified":"2026-06-17T05:05:01.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privileged user with access to several endpoints to brute force attack these endpoints."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"6.7.0","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.3","versionType":"semver","status":"affected"},{"version":"5.2.5","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.2.1","lessThanOrEqual":"5.2.2","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:10:59.872029Z","id":"CVE-2022-42478","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.3","matchCriteriaId":"D52F2E6B-9A88-4DB4-8CB9-09A3AFFF1685"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.3","matchCriteriaId":"A0258A88-352D-4F9A-894D-F7442CAFE461"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.3","matchCriteriaId":"D9FC4C46-F269-4635-80BE-BED292538FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE69B846-3B23-401D-98D0-46DC976A25FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DE4C2A49-23CB-4104-A345-46B3B4A29A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4B114C6F-82AF-4ADF-B840-61851B9E39C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"0C759185-C780-426F-8185-258C88A924A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B669A735-2DC0-434A-9CE1-0232F62848D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"4A5FA2FC-419D-46E8-ACE3-929E5B39F1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91E43A1B-D4C5-4FFF-9D3E-00140023921E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F52E2B2-A3B1-493F-B092-77A2A44E855A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7B16CB79-AC63-41EA-AE9A-D6030449ACD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"912BA146-D840-4855-8C47-AC3D5E6D0C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"51452B16-AB83-41D3-8779-3E1AEA818AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3F453DE5-E31D-4BD1-8978-DD6D166045E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C48AC74D-9FBE-4194-9BE8-FD2D6A0EC788"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BFFA27A5-0168-4261-9A04-D2DBB0A9946D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2035DFA0-FF3A-4BBF-ABFE-0E310A7C668B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A391C353-BD26-4262-B86F-E3FBF8915DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD5BE55-0990-4646-ADA7-9A30981D4DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F46426B1-B144-432C-8BA6-317617EBC110"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*","matchCriteriaId":"6590962C-FF61-4237-8F30-33B15829C8B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*","matchCriteriaId":"32B5BFCB-DFD4-4519-A2AF-1FABA58FA04D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"50635727-53A0-476F-BB86-A47CDAA3D45B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*","matchCriteriaId":"0534E1D8-8099-4FF1-A5A9-36CCA8F7956A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-258","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-43949","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:16.027","lastModified":"2026-06-17T05:07:32.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of a broken or risky cryptographic algorithm [CWE-327]  in Fortinet FortiSIEM before 6.7.1 allows a remote unauthenticated attacker to perform brute force attacks on GUI endpoints via taking advantage of outdated hashing methods."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"6.7.0","lessThanOrEqual":"6.7.1","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:02.278116Z","id":"CVE-2022-43949","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.3","matchCriteriaId":"A0258A88-352D-4F9A-894D-F7442CAFE461"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.3","matchCriteriaId":"D9FC4C46-F269-4635-80BE-BED292538FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.0","versionEndIncluding":"6.6.3","matchCriteriaId":"EB301503-0ECB-4D21-B341-ACF0F302CF85"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91E43A1B-D4C5-4FFF-9D3E-00140023921E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F52E2B2-A3B1-493F-B092-77A2A44E855A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7B16CB79-AC63-41EA-AE9A-D6030449ACD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"912BA146-D840-4855-8C47-AC3D5E6D0C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"51452B16-AB83-41D3-8779-3E1AEA818AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3F453DE5-E31D-4BD1-8978-DD6D166045E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C48AC74D-9FBE-4194-9BE8-FD2D6A0EC788"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BFFA27A5-0168-4261-9A04-D2DBB0A9946D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2035DFA0-FF3A-4BBF-ABFE-0E310A7C668B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A391C353-BD26-4262-B86F-E3FBF8915DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD5BE55-0990-4646-ADA7-9A30981D4DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*","matchCriteriaId":"0534E1D8-8099-4FF1-A5A9-36CCA8F7956A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D7E6B1E1-6527-4A64-BB77-0505E58C2F36"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-259","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-43953","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:16.077","lastModified":"2026-06-17T05:07:32.597","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2, FortiProxy version 7.2.0 through 7.2.1, FortiProxy version 7.0.0 through 7.0.7 allows attacker to execute unauthorized code or commands via specially crafted commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:10:58.474025Z","id":"CVE-2022-43953","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"3F3A99BB-534C-4984-948B-8FFF659A9B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.12","matchCriteriaId":"5E99B6E5-7EC3-406C-AFAC-A5E32DE266DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.11","matchCriteriaId":"C2573C90-BE6A-4D5D-A223-F09213318909"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-463","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-22633","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:16.127","lastModified":"2026-06-17T05:35:46.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions 8.7.0 all versions may allow an unauthenticated attacker to perform a DoS attack on the device via client-secure renegotiation."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.1","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.6","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.8","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"7.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:36.164159Z","id":"CVE-2023-22633","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-264"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"8.7.6","matchCriteriaId":"3BD32B25-76B4-4D6E-BB5C-065070297058"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndIncluding":"8.8.11","matchCriteriaId":"46929BE3-0396-4B8A-9889-9F6CA73FAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.8","matchCriteriaId":"4DFD62C8-07EF-4C7C-B18B-414A9C4A2955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.6","matchCriteriaId":"9331C47E-0CA4-4B2F-A89F-5C0AAEF3ECAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E12E11B0-E21A-4124-9DF9-FF268BB19813"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4648F862-AB8C-4B8D-8F2D-5D2641F08845"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"77DE647F-0252-42E2-8BDD-C98DC899C613"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-521","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-22639","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:16.177","lastModified":"2026-06-17T05:35:47.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, FortiOS all versions 6.2, FortiOS all versions 6.0, FortiProxy version 7.2.0 through 7.2.2, FortiProxy version 7.0.0 through 7.0.8, FortiProxy all versions 2.0, FortiProxy all versions 1.2, FortiProxy all versions 1.1, FortiProxy all versions 1.0 allows attacker to escalation of privilege via specifically crafted commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.17","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.12","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:10:57.056496Z","id":"CVE-2023-22639","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.12","matchCriteriaId":"7C1D5E6B-A23E-4A92-B53C-720AFEB1B951"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"C83139FA-7195-4171-8BC6-CC4F9379C7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7028AFDA-6CB5-4DB0-8977-9BA995DE14C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.17","matchCriteriaId":"0135464C-532C-430D-A76C-2FCDE4C991D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.12","matchCriteriaId":"5E99B6E5-7EC3-406C-AFAC-A5E32DE266DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"9E775D02-7C02-40BE-A118-D874B9BBC936"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"813E179E-B948-4480-A5B1-B0ED562A41BC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-494","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-25609","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:16.227","lastModified":"2026-06-17T05:41:36.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.8","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.8","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:18:00.675673Z","id":"CVE-2023-25609","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.8","versionEndIncluding":"6.4.11","matchCriteriaId":"A1422EEA-A01E-4451-ACB4-1EC85FC15E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"77DD4559-290F-424D-8696-20AE8FF42714"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"319D2F9D-E1E5-49C7-8ABD-0A64D7B05D58"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FDD88F7C-8136-4CFF-AF1E-9AE928878C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.8","versionEndIncluding":"6.4.11","matchCriteriaId":"431C5172-EFBC-4E26-AAF5-97A1251A368B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"D25913D0-D586-4A59-9723-E26009AD17E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"407755AA-0C23-4C5B-88A2-8BC12A3D268D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A0A1111-4054-4C7B-B333-E13A8684207B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-493","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-26204","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:16.417","lastModified":"2026-06-17T05:42:48.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate any admin user on the device GUI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"6.7.0","lessThanOrEqual":"6.7.5","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:17:58.321671Z","id":"CVE-2023-26204","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-256"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.3","matchCriteriaId":"A0258A88-352D-4F9A-894D-F7442CAFE461"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.3","matchCriteriaId":"D9FC4C46-F269-4635-80BE-BED292538FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.0","versionEndIncluding":"6.6.3","matchCriteriaId":"EB301503-0ECB-4D21-B341-ACF0F302CF85"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndIncluding":"6.7.5","matchCriteriaId":"20FD2D69-73DD-4EA4-ADE6-EB4BCFED7AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91E43A1B-D4C5-4FFF-9D3E-00140023921E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F52E2B2-A3B1-493F-B092-77A2A44E855A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7B16CB79-AC63-41EA-AE9A-D6030449ACD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"912BA146-D840-4855-8C47-AC3D5E6D0C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"51452B16-AB83-41D3-8779-3E1AEA818AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3F453DE5-E31D-4BD1-8978-DD6D166045E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C48AC74D-9FBE-4194-9BE8-FD2D6A0EC788"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BFFA27A5-0168-4261-9A04-D2DBB0A9946D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2035DFA0-FF3A-4BBF-ABFE-0E310A7C668B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A391C353-BD26-4262-B86F-E3FBF8915DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD5BE55-0990-4646-ADA7-9A30981D4DF2"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-141","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-26207","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:16.467","lastModified":"2026-06-17T05:42:49.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:17:59.430978Z","id":"CVE-2023-26207","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"7E1251FE-2B46-46AA-B474-506B0079810D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-455","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-26210","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:16.510","lastModified":"2026-06-17T05:42:49.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet  allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.8:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiADCManager","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadcmanager:7.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadcmanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadcmanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadcmanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadcmanager:6.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadcmanager:6.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadcmanager:5.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadcmanager:5.3.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadcmanager:5.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadcmanager:5.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.0","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.1.0","status":"affected"},{"version":"6.0.0","status":"affected"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:10:55.831517Z","id":"CVE-2023-26210","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.8","matchCriteriaId":"6B546C4E-F9AF-4514-B5A9-BD29A1FE663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.7","matchCriteriaId":"A3EEDDB2-61AC-43F4-9719-3548057EF30E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.5","matchCriteriaId":"54EBC78D-0358-474F-9654-3EF9950D563B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"F5275C5C-B6FD-4456-B143-ECDD282150C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"302D8FF0-69B6-451A-9B5B-E28B2FAA30D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B35D8D53-448B-474C-B7CB-324CB4ED7A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"933701AE-43E3-4260-973B-4EA09C375965"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F3029D7-4C37-4468-9CCD-45C7259EFF2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"74B0A112-AA30-4D11-8F36-3DC8A2EBCA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAA5FB00-FC3E-4777-BD9A-734987027551"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9E41C15C-0F00-489B-A613-8ACEB42AB0E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"748AC964-D839-4C52-A66E-0BAA4AE01FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FE35CDD0-DFA3-47C9-BC7A-A96DC56104AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AF5202B6-3CD2-4D7E-8344-6A89B79B2311"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F621087C-9173-4CB9-B3CA-303AD0DEBFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"030BA301-8A64-46AB-990D-24BCDFCDE4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"692AC209-F327-4746-933B-002601232B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CC6A0A-A3AB-443A-880A-608FC9598D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc_manager:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9435E543-D4A4-416E-A8A7-CE45868E1F82"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-076","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-27997","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:16.613","lastModified":"2026-07-31T04:16:43.707","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS-6K7K","defaultStatus":"unaffected","versions":[{"version":"7.0.10","status":"affected"},{"version":"7.0.5","status":"affected"},{"version":"6.4.12","status":"affected"},{"version":"6.4.10","status":"affected"},{"version":"6.4.8","status":"affected"},{"version":"6.4.6","status":"affected"},{"version":"6.4.2","status":"affected"},{"version":"6.2.9","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.2.4","status":"affected"},{"version":"6.0.12","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"},{"version":"6.0.10","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.12","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-06-12T00:00:00+00:00","id":"CVE-2023-27997","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2023-06-13","cisaActionDue":"2023-07-04","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.12","matchCriteriaId":"7C1D5E6B-A23E-4A92-B53C-720AFEB1B951"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"DAC18F7E-5242-4F36-BB42-FEC33B3AC075"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"3A99FF48-370E-4D2A-B5CC-889EA21AB213"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.16","matchCriteriaId":"8EA5512D-6EE5-4DF3-A960-C02394F25225"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.13","matchCriteriaId":"3CD57A5A-2B13-495A-8530-8F97E1720602"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.12","matchCriteriaId":"5E99B6E5-7EC3-406C-AFAC-A5E32DE266DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.11","matchCriteriaId":"C2573C90-BE6A-4D5D-A223-F09213318909"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.12","versionEndIncluding":"6.0.16","matchCriteriaId":"6D997493-24C2-4A78-9DF0-6438E9415A3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.9","versionEndIncluding":"6.2.13","matchCriteriaId":"0A0D0D55-1A51-454D-A8B1-D7100D453102"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"FA6AF1FA-A034-439A-876B-BFA1BE7DE15E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9694FC0C-408A-4892-ADD1-F36F4BBBD9EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2B8A132F-601F-4129-BFCA-3A976A711D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"90600B14-07C4-455D-9FC1-17034D91B987"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B28478DA-8D10-4A8E-81EA-D3DF421E5089"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","matchCriteriaId":"C2F935F9-5B6A-47C2-8F65-7A1E8BB061FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","matchCriteriaId":"751D2FC7-482F-4C6B-95DB-244004A2738E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","matchCriteriaId":"EEE44B20-6F00-4962-9929-5A5054BBA94C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","matchCriteriaId":"EB2FF1DA-001B-4CA1-9F46-427D9C92CBC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"48D0E8CC-3815-4697-86D0-DC7F66E70520"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"78C6C937-4477-438D-A252-E4102D758120"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_6000:-:*:*:*:*:*:*:*","matchCriteriaId":"3BB410C9-CDD4-4068-97E0-6D83AE62B7F1"},{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortigate_7000:-:*:*:*:*:*:*:*","matchCriteriaId":"E0CBA773-10C1-410D-BB01-771F454ABEBA"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-097","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27997","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2023-28000","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:16.660","lastModified":"2026-06-17T05:46:20.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC CLI 7.1.0, 7.0.0 through 7.0.3, 6.2.0 through 6.2.4, 6.1 all versions, 6.0 all versions may allow a local and authenticated attacker to execute unauthorized commands via specifically crafted arguments in diagnose system df CLI command."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:10:54.410766Z","id":"CVE-2023-28000","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.4","matchCriteriaId":"33841D32-4756-42CD-8765-948EC5119512"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"4488C266-0436-40AD-BD99-A228787285AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B35D8D53-448B-474C-B7CB-324CB4ED7A82"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-107","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-29175","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:17.027","lastModified":"2026-06-17T05:49:32.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all versions, 7.0.0 through 7.0.10, 7.2.0 and FortiProxy 1.2 all versions, 2.0 all versions, 7.0.0 through 7.0.9, 7.2.0 through 7.2.3 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the vulnerable device and the remote FortiGuard's map server."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:17:56.986398Z","id":"CVE-2023-29175","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.12","matchCriteriaId":"7C1D5E6B-A23E-4A92-B53C-720AFEB1B951"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"DAC18F7E-5242-4F36-BB42-FEC33B3AC075"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"3A99FF48-370E-4D2A-B5CC-889EA21AB213"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.17","matchCriteriaId":"0135464C-532C-430D-A76C-2FCDE4C991D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.13","matchCriteriaId":"D962937C-B057-4422-A672-8DD2F3C3B3B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"8870AB06-C50F-452A-952C-30DE7860264E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-468","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-29178","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:17.077","lastModified":"2026-10-22T14:17:30.263","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy 7.2.0 through 7.2.3, FortiProxy 7.0.0 through 7.0.9, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions allows an authenticated attacker to repetitively crash the httpsd process via crafted HTTP or HTTPS requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:17:55.847522Z","id":"CVE-2023-29178","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-824"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-824"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.12","matchCriteriaId":"7C1D5E6B-A23E-4A92-B53C-720AFEB1B951"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"DAC18F7E-5242-4F36-BB42-FEC33B3AC075"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7028AFDA-6CB5-4DB0-8977-9BA995DE14C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5A2777EA-F45D-4D3A-AA2F-078E2B874A30"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.17","matchCriteriaId":"0135464C-532C-430D-A76C-2FCDE4C991D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.13","matchCriteriaId":"D962937C-B057-4422-A672-8DD2F3C3B3B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.11","matchCriteriaId":"C2573C90-BE6A-4D5D-A223-F09213318909"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-095","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-33305","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-13T09:15:18.563","lastModified":"2026-06-17T06:01:32.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4 all versions,  FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy version 7.2.0 through 7.2.3, FortiProxy version 7.0.0 through 7.0.9, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiWeb version 7.2.0 through 7.2.1, FortiWeb version 7.0.0 through 7.0.6, FortiWeb 6.4 all versions, FortiWeb 6.3 all versions allows attacker to perform a denial of service via specially crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.23","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.13","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.17","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.14","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.13","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.15","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.12","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:17:54.739280Z","id":"CVE-2023-33305","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-835"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.12","matchCriteriaId":"7C1D5E6B-A23E-4A92-B53C-720AFEB1B951"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"DAC18F7E-5242-4F36-BB42-FEC33B3AC075"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"3A99FF48-370E-4D2A-B5CC-889EA21AB213"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.23","matchCriteriaId":"29BAA789-62A7-4040-B6F7-8E70FFBA0399"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.3","matchCriteriaId":"AF5ED7B3-39F3-49FD-82D9-72CAB2D68636"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"00A1259A-261F-47B9-8DFA-16C7C67F27E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1B5C-5CD3-4614-9B4D-E9D91FCF9321"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"962B85ED-89C2-4453-9F59-F242031A2E46"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.14","matchCriteriaId":"5BB7E21E-A68B-44FC-8F0E-EF5926186F26"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.15","matchCriteriaId":"3F93F9C8-6064-4CED-88DF-3580C517AB51"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.13","matchCriteriaId":"0507F264-9E8D-4F9D-AB18-0C6CA5BD69F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.14","matchCriteriaId":"AC0AFBC1-5C11-412E-9979-AF89DD26EFCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.17","matchCriteriaId":"0135464C-532C-430D-A76C-2FCDE4C991D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.13","matchCriteriaId":"D962937C-B057-4422-A672-8DD2F3C3B3B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"9E775D02-7C02-40BE-A118-D874B9BBC936"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-375","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-33306","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-16T10:15:09.467","lastModified":"2026-06-17T06:01:32.997","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A null pointer dereference in Fortinet FortiOS before 7.2.5,  before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:17:53.416082Z","id":"CVE-2023-33306","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.10","matchCriteriaId":"5E6D4C77-6D88-4DD2-8A5C-610DE901EBBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"9A0AB0B8-819F-46EE-A921-119B76A138B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.13","matchCriteriaId":"B153B056-24AE-41C4-B644-65E080C18360"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"8870AB06-C50F-452A-952C-30DE7860264E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4562BDF7-D894-4CD8-95AC-9409FDEBE73F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-015","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-33307","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-16T10:15:09.523","lastModified":"2026-06-17T06:01:33.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:17:52.005676Z","id":"CVE-2023-33307","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"DAC18F7E-5242-4F36-BB42-FEC33B3AC075"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"3A99FF48-370E-4D2A-B5CC-889EA21AB213"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"8870AB06-C50F-452A-952C-30DE7860264E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4562BDF7-D894-4CD8-95AC-9409FDEBE73F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-015","source":"psirt@fortinet.com","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/258201","source":"nvd@nist.gov","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2023-33299","sourceIdentifier":"psirt@fortinet.com","published":"2023-06-23T08:15:09.483","lastModified":"2026-06-17T06:01:31.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unauthorized code or commands via specifically crafted request on inter-server communication port. Note FortiNAC versions 8.x will not be fixed."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.2","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.7","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.9","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.3.7","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:19:07.431174Z","id":"CVE-2023-33299","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-502"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-502"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"8292B841-851C-42C2-AF13-17AB2FA894CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"95E75B88-1750-4FB6-BCE4-74B69D93C918"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndIncluding":"8.7.6","matchCriteriaId":"3BD32B25-76B4-4D6E-BB5C-065070297058"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.8.0","versionEndIncluding":"8.8.11","matchCriteriaId":"46929BE3-0396-4B8A-9889-9F6CA73FAD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.9","matchCriteriaId":"D101F116-0C73-401E-9882-8BA2F403FA4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.7","matchCriteriaId":"B341AE7E-48F1-4ABE-891F-F9D543D19E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EFF5B4CF-5BF9-4852-BD4F-5A27FD17EDC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4C3107FF-B414-4C7C-BD97-AC102A744B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:8.3.7:*:*:*:*:*:*:*","matchCriteriaId":"952F266E-0E48-4D69-81E0-9F813B60AC3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E12E11B0-E21A-4124-9DF9-FF268BB19813"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4648F862-AB8C-4B8D-8F2D-5D2641F08845"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:9.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6B0251A8-1E8B-4B4A-962F-3E5950601814"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-074","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22302","sourceIdentifier":"psirt@fortinet.com","published":"2023-07-11T09:15:09.073","lastModified":"2026-11-10T12:10:00.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 and 6.0.0 through 6.0.13 and FortiAuthenticator version 5.5.0 and all versions of 6.1 and 6.0 may allow a local unauthorized party to retrieve the Fortinet private keys used to establish secure communication with both Apple Push Notification and Google Cloud Messaging services, via accessing the files on the filesystem."},{"lang":"es","value":"Una vulnerabilidad de almacenamiento de información sensible en texto claro (CWE-312) en FortiGate versiones 6.4.0 a 6.4.1, 6.2.0 a 6.2.9 y 6.0.0 a 6.0.13, y en FortiAuthenticator versión 5.5.0 y todas las versiones de 6.1 y 6.0, podría permitir a una parte local no autorizada recuperar las claves privadas de Fortinet utilizadas para establecer comunicación segura con los servicios de Apple Push Notification y Google Cloud Messaging, mediante el acceso a los archivos en el sistema de archivos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","versions":[{"version":"6.1.0","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.5.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:34.745217Z","id":"CVE-2022-22302","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-312"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"47A3EAE7-BA29-4267-BF88-61ACA9F40AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0C30DF6A-2839-4B19-AF75-2A5BD82CB0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8BCCE874-8B7F-4A4A-9A28-C32280E77708"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.13","matchCriteriaId":"A6EF01D9-50FB-4300-87FB-132649A9AC51"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C4C0308D-8E52-456B-BFC2-62D4C1E9BDC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1C6E45EB-4C8C-4777-9200-08B14595A3A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9D114536-7169-4814-B011-570E3AD86A3D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-014","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-20-014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-23777","sourceIdentifier":"psirt@fortinet.com","published":"2023-07-11T09:15:09.460","lastModified":"2026-06-17T05:37:56.933","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.18 and below may allow a privileged attacker to execute arbitrary bash commands via crafted cli backup parameters."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.18","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:10:52.999932Z","id":"CVE-2023-23777","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndIncluding":"6.3.18","matchCriteriaId":"50CAE07E-9AA6-40F8-9A38-171AE7244FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.3","matchCriteriaId":"AF5ED7B3-39F3-49FD-82D9-72CAB2D68636"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF60F8C-355E-4F89-A1E3-EE0644D03EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8A50C87E-68F1-449E-8111-4082CD9BBCA9"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-131","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-23447","sourceIdentifier":"psirt@fortinet.com","published":"2023-07-11T17:15:10.383","lastModified":"2026-11-10T12:10:00.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiExtender management interface  7.0.0 through 7.0.3, 4.2.0 through 4.2.4, 4.1.1 through 4.1.8, 4.0.0 through 4.0.2, 3.3.0 through 3.3.2, 3.2.1 through 3.2.3, 5.3 all versions may allow an unauthenticated and remote attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests."},{"lang":"es","value":"Una limitación inadecuada de un nombre de ruta a un directorio restringido (’Salto de ruta’) vulnerabilidad [CWE-22] en la interfaz de gestión de FortiExtender 7.0.0 a 7.0.3, 4.2.0 a 4.2.4, 4.1.1 a 4.1.8, 4.0.0 a 4.0.2, 3.3.0 a 3.3.2, 3.2.1 a 3.2.3, 5.3 todas las versiones puede permitir a un atacante remoto y no autenticado recuperar archivos arbitrarios del sistema de archivos subyacente a través de solicitudes web especialmente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiExtender","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"5.3.2","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.4","versionType":"semver","status":"affected"},{"version":"4.1.1","lessThanOrEqual":"4.1.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.2","versionType":"semver","status":"affected"},{"version":"3.2.1","lessThanOrEqual":"3.2.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:15:33.419696Z","id":"CVE-2022-23447","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.1","versionEndExcluding":"3.2.4","matchCriteriaId":"D7C7C2CF-4343-4DC6-A9CC-2AD085FF4719"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.3","matchCriteriaId":"BF3BA216-3C90-451D-99AC-DC64259A1312"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"42280061-9248-48CF-98E1-89B83D044137"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.1","versionEndExcluding":"4.1.9","matchCriteriaId":"D6594D0E-3A47-4E9F-B020-FBC2C1AED759"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.5","matchCriteriaId":"48A96D42-A019-422C-AB50-7CAF378FDDE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"46532FCC-760C-43ED-8DC4-81427D279980"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1CC2C9D3-01FD-4D5B-AE85-05B0CA6C99AA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiextender:-:*:*:*:*:*:*:*","matchCriteriaId":"A0617C1D-E321-409D-B54B-775E854A03C1"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-039","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-25606","sourceIdentifier":"psirt@fortinet.com","published":"2023-07-11T17:15:12.780","lastModified":"2026-06-17T05:41:36.013","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4  all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:17:49.736572Z","id":"CVE-2023-25606","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.12","matchCriteriaId":"2B7F56A0-3940-43F1-9B29-45CE29043D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"7C074678-DF36-4DE2-B930-4E58C4F45135"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"12767150-C085-41ED-A645-83BFE7E846E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.12","matchCriteriaId":"142A4113-BEF9-4112-AC7D-757A18CFF2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"B70D346A-A68B-4F41-992B-7C273F792E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"C654DFBA-E3B0-4865-9088-13385A428E78"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-471","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-28001","sourceIdentifier":"psirt@fortinet.com","published":"2023-07-11T17:15:12.883","lastModified":"2026-06-17T05:46:21.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via reusing the session of a deleted user in the REST API."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.7,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:17:50.886475Z","id":"CVE-2023-28001","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-613"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"BA582D59-C740-4AE7-83CA-C09A1D0EDA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-028","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-43072","sourceIdentifier":"psirt@fortinet.com","published":"2023-07-18T03:15:54.947","lastModified":"2026-06-17T04:10:28.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiManager version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiOS version 7.0.0 through 7.0.4, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x and FortiProxy version 7.0.0 through 7.0.3, 2.0.0 through 2.0.8, 1.2.x, 1.1.x and 1.0.x allows attacker to execute unauthorized code or commands via crafted CLI `execute restore image` and `execute certificate remote` operations with the tFTP protocol."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-16T18:40:02.770628Z","id":"CVE-2021-43072","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.4.8","matchCriteriaId":"5F6DA041-82B6-44B4-821F-3B20DDF9AB1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"F769E92C-C005-4BC8-9F48-F2E6218FFEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"6.4.8","matchCriteriaId":"CDA2EE2B-21EC-4D67-8D10-44D20D489ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"703550D7-5800-4870-9FE7-CE4B45B12591"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"2.0.9","matchCriteriaId":"5F2492A7-82C7-4FBA-BF73-045206262F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"65B25C92-D0B5-46EC-99CD-D617BE4FD46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.11","matchCriteriaId":"2841B1B5-EC6D-46EE-8FD4-464330144791"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.9","matchCriteriaId":"08019066-27F4-4E9D-B6E5-2F74BAF065EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"103E0368-0675-4511-95BF-D5CCD67BBAA5"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-206","source":"psirt@fortinet.com","tags":["Not Applicable"]},{"url":"https://www.fortiguard.com/psirt/FG-IR-21-206","source":"nvd@nist.gov","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2023-33308","sourceIdentifier":"psirt@fortinet.com","published":"2023-07-26T15:15:10.347","lastModified":"2026-06-17T06:01:33.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy policies or firewall policies with proxy mode alongside deep or full packet inspection."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:07:14.340046Z","id":"CVE-2023-33308","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"DAC18F7E-5242-4F36-BB42-FEC33B3AC075"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7028AFDA-6CB5-4DB0-8977-9BA995DE14C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"6BB39159-5B36-415A-A57E-AFAFD7B848CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"813E179E-B948-4480-A5B1-B0ED562A41BC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-183","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-29182","sourceIdentifier":"psirt@fortinet.com","published":"2023-08-17T10:15:09.703","lastModified":"2026-06-17T05:49:33.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiOS before 7.0.3 allows a privileged attacker to execute arbitrary code via specially crafted CLI commands, provided the attacker were able to evade FortiOS stack protections."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-08T17:12:44.376599Z","id":"CVE-2023-29182","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.0.4","matchCriteriaId":"81949446-ADC8-4B07-95FF-3C2D27DDF927"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-149","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22305","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-01T12:15:08.363","lastModified":"2026-06-17T04:28:12.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta [CWE-295] en FortiManager v7.0.1 y versiones inferiores, v6.4.6 y versiones inferiores; FortiAnalyzer v7.0.2 y versiones inferiores, v6.4.7 y versiones inferiores; FortiOS v6.2.x y v6.0.x; FortiSandbox v4.0.x, 3.2.x y 3.1.x puede permitir a un atacante adyacente a la red y no autenticado interceder en la comunicación mediante la técnica de man-in-the-middle entre los productos enumerados y algunos peers externos. "}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.6","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-27T18:01:39.754816Z","id":"CVE-2022-22305","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-297"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"2318A6AC-AA3E-4604-968C-35A46E79FCB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.9","versionEndIncluding":"6.4.7","matchCriteriaId":"82AA3275-8A1D-43DA-880B-1EFFBD96C29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D7DC87E0-0C9F-4E65-B96E-7E91F71764AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80518C1A-60DB-4CC3-92ED-0C0BDCF2F1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F8619721-489F-4BE7-BBAC-7D07FB64A8EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"8DFFD873-3F9B-41D8-92E6-09F84712BCE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.11","matchCriteriaId":"67777F42-09E1-4651-807C-325A5F0D8A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"D4EB03A2-7143-407C-B622-03E6AFAF6A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4E6379-A79E-4135-BAF1-D53E8F56798B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9CF421D9-54D7-47FB-AB11-A556BDB4A372"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.7","matchCriteriaId":"7D1EE4D7-4087-4A4A-9171-F48B1C5915C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.5","matchCriteriaId":"2C47A3DB-A02A-488D-B0E1-867A19CE43B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.4","matchCriteriaId":"16BB4915-1330-45E5-887E-AD97C29F500B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"527BEC13-9EC9-44AB-9F02-C948BDC96558"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0260B512-77CA-4FE8-A039-D7B287A19BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6CCD1A-3412-4A55-88A8-40B227FB00BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"51A80522-EBFC-4C3E-BF38-01453CC359F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.10","versionEndIncluding":"5.6.14","matchCriteriaId":"1728ED99-9A01-4819-B382-EDEF00F97B9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.17","matchCriteriaId":"0135464C-532C-430D-A76C-2FCDE4C991D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-18-292","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-18-292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36635","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-07T13:15:08.433","lastModified":"2026-06-17T06:06:43.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2\r\n7.0.0 through 7.0.1 may allow a remote authenticated read-only user to modify the interface settings via the API."},{"lang":"es","value":"Un control de acceso incorrecto en Fortinet FortiSwitchManager, versiones 7.2.0 a 7.2.2 y versiones 7.0.0 a 7.0.1, puede permitir que un usuario remoto autenticado con permisos de solo lectura modifique la configuración de la interfaz a través de la API."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-26T14:00:27.488932Z","id":"CVE-2023-36635","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5B4A6B0D-1614-443B-8EBA-A8FBC2E1A832"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"331A1766-4EBA-4519-A8ED-E0DD68A187E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2B73D78B-2270-45B7-854E-F985B8D88F3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"469E9E1C-154C-41CB-AC83-FBE5E6FA83EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"959248C7-DC92-4968-87F9-2A2CDF84F7BE"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-174","source":"psirt@fortinet.com","tags":["Not Applicable","Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-44172","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:07.537","lastModified":"2026-06-17T04:11:59.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 through 7.0.4, 7.0.6 through 7.0.7, in all 6.4 and 6.2 version management interface may allow an unauthenticated attacker to gain information on environment variables such as the EMS installation path."},{"lang":"es","value":"Una vulnerabilidad de exposición de información sensible a un actor no autorizado [CWE-200] en FortiClientEMS versiones 7.0.0 a 7.0.4, 7.0.6 a 7.0.7, en todas las versiones de interfaz de administración 6.4 y 6.2 puede permitir que un atacante no autenticado obtenga información en variables de entorno como la ruta de instalación de EMS"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.0.6","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T19:39:59.818505Z","id":"CVE-2021-44172","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"D16D1BDE-ED3A-472B-AE5D-9A22B330AD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"C4FE4D98-C047-4A51-BFD2-99ADB9C18BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.4","matchCriteriaId":"80967C38-4E85-4E88-B471-D17622C7F723"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.6","versionEndIncluding":"7.0.7","matchCriteriaId":"699A4FFF-6CEB-497C-9423-5FAD6C2989C3"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-244","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-35849","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:07.823","lastModified":"2026-06-17T04:52:24.213","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and  6.1.0 all versions may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands."},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando de sistema operativo [CWE-78] en la interfaz de administración de FortiADC 7.1.0 a 7.1.1, 7.0.0 a 7.0.3, 6.2.0 a 6.2.5 y 6.1.0 Todas las versiones pueden permitir que un atacante autenticado ejecute comandos no autorizados mediante argumentos específicamente manipulados para comandos existentes."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-16T16:03:19.306642Z","id":"CVE-2022-35849","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.6","matchCriteriaId":"ADD23F1D-7F27-4C1E-8884-F5CE6005C6A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"001D264D-17BD-4DB5-9792-D6849F63B9D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndExcluding":"7.1.2","matchCriteriaId":"30963483-E0D5-4B71-B649-79194ACC77BF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-310","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-25608","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:08.040","lastModified":"2026-06-17T05:41:36.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all versions; FortiAP 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions, 6.0 all versions; FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to read arbitrary files via specially crafted command arguments."},{"lang":"es","value":"Una vulnerabilidad de filtrado incompleto de una o más instancias de elementos especiales [CWE-792] en el intérprete de línea de comando de FortiAP-W2 7.2.0 a 7.2.1, 7.0.3 a 7.0.5, 7.0.0 a 7.0.1, 6.4 todas las versiones, 6.2 todas las versiones, 6.0 todas las versiones; FortiAP-C 5.4.0 a 5.4.4, 5.2 todas las versiones; FortiAP 7.2.0 a 7.2.1, 7.0.0 a 7.0.5, 6.4 todas las versiones, 6.0 todas las versiones; FortiAP-U 7.0.0, 6.2.0 a 6.2.5, 6.0 todas las versiones, 5.4 todas las versiones puede permitir que un atacante autenticado lea archivos arbitrarios mediante argumentos de comando especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAP-W2","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.3","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAP-C","defaultStatus":"unaffected","versions":[{"version":"5.4.0","lessThanOrEqual":"5.4.4","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAP","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.4.3","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAP-U","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.5","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.3","lessThanOrEqual":"5.4.6","versionType":"semver","status":"affected"},{"version":"5.4.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAP-S","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T19:45:36.151614Z","id":"CVE-2023-25608","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-792"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"B5BE67AF-5DC9-4942-832F-03BEC88CD2B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"41C213D0-356F-425E-A124-5B72A3AEE54D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-c:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndExcluding":"5.4.5","matchCriteriaId":"6E770699-3997-4E61-A4AD-68D102FCA4B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndExcluding":"6.2.6","matchCriteriaId":"2D44BE0A-B671-454C-8B6A-56AA4BA70E60"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"743763F2-D4DE-4E9D-B112-7CA27C61A423"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"7.0.1","matchCriteriaId":"87E0B46B-B76D-4D27-AD6F-E929E362B6E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.3","versionEndExcluding":"7.0.6","matchCriteriaId":"B602BCD9-47CF-443C-A759-0B8379777768"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"B9D26699-16AD-4752-A088-72CF117C98D0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-120","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-27998","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:08.200","lastModified":"2026-06-17T05:46:20.667","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths."},{"lang":"es","value":"Una vulnerabilidad de falta de páginas de error personalizadas [CWE-756] en las versiones 1.2.0 a 1.2.1 de FortiPresence y todas las versiones 1.1 y 1.0 puede permitir que un atacante no autenticado con la capacidad de navegar hasta la GUI de inicio de sesión obtenga información sensible navegando a rutas HTTP(s) específicas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPresence","defaultStatus":"unaffected","versions":[{"version":"1.2.0","lessThanOrEqual":"1.2.1","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.1","versionType":"semver","status":"affected"},{"version":"1.0.0","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortipresence","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortipresence:*:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","status":"affected"},{"version":"1.1.0","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-25T17:24:33.642111Z","id":"CVE-2023-27998","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-756"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-755"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortipresence:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"889484EB-8EDC-4FB5-A0F9-1E719C9099D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortipresence:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DF2B518A-EA40-4D65-9E9A-69D39A8AC01F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortipresence:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C2BEFF20-BAFA-4169-8F6A-D472C45EB2EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortipresence:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"14BC839F-E70C-4676-B523-BAD563C8E6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortipresence:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1E5C2455-84E1-4403-A4B5-B57CDA302BBD"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-288","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-29183","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:08.367","lastModified":"2026-06-17T05:49:33.727","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14 GUI may allow an authenticated attacker to trigger malicious JavaScript code execution via crafted guest management setting."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la vulnerabilidad de generación de páginas web ('Cross-Site Scripting') [CWE-79] en FortiProxy 7.2.0 a 7.2.4, 7.0.0 a 7.0.10 y FortiOS 7.2.0 a 7.2.4, Las versiones 7.0.0 a 7.0.11, 6.4.0 a 6.4.12, 6.2.0 a 6.2.14 pueden permitir que un atacante autenticado desencadene la ejecución de código JavaScript malicioso a través de una configuración de administración de invitados manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-11-15T16:35:37.397795Z","id":"CVE-2023-29183","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"A5D70694-BB02-43E2-8F74-D50D9D4C5E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"122518E7-EA43-4240-AAFB-61AD2AA28A2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.15","matchCriteriaId":"05454D49-17D8-4A7D-92C8-B33B006A35DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.13","matchCriteriaId":"B153B056-24AE-41C4-B644-65E080C18360"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"39A6C2A7-21A4-4BB5-A3B6-9466E5CEA296"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4562BDF7-D894-4CD8-95AC-9409FDEBE73F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-106","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34984","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:08.527","lastModified":"2026-06-17T06:04:13.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests."},{"lang":"es","value":"Una falla en el mecanismo de protección en Fortinet FortiWeb 7.2.0 a 7.2.1, 7.0.0 a 7.0.6, 6.4.0 a 6.4.3, 6.3.6 a 6.3.23 permite a un atacante ejecutar código o comandos no autorizados a través peticiones HTTP especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.23","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T21:00:15.915201Z","id":"CVE-2023-34984","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-693"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndIncluding":"6.3.23","matchCriteriaId":"64127060-27BA-4389-A806-BADACD6152C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.3","matchCriteriaId":"AF5ED7B3-39F3-49FD-82D9-72CAB2D68636"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"00A1259A-261F-47B9-8DFA-16C7C67F27E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.1","matchCriteriaId":"A9C2C162-C41F-46E6-8B48-22E3847441EE"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-068","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36551","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:08.697","lastModified":"2026-06-17T06:06:31.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows attacker to information disclosure via a crafted http request."},{"lang":"es","value":"La exposición de información sensible a un actor no autorizado en Fortinet FortiSIEM versión 6.7.0 a 6.7.5 permite al atacante revelar información a través de una solicitud http manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"6.7.0","lessThanOrEqual":"6.7.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T19:45:27.559681Z","id":"CVE-2023-36551","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndExcluding":"6.7.6","matchCriteriaId":"26117F45-D8BA-4BBE-996D-D2799A625ADA"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-126","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36634","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:08.883","lastModified":"2026-06-17T06:06:43.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments."},{"lang":"es","value":"Un filtrado incompleto de una o más instancias de vulnerabilidad de elementos especiales [CWE-792] en el intérprete de línea de comando de FortiAP-U 7.0.0, 6.2.0 a 6.2.5, 6.0 todas las versiones, 5.4 todas las versiones puede permitir un atacante autenticado para enumerar y eliminar archivos y directorios arbitrarios mediante argumentos de comandos especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAP-U","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.5","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.3","lessThanOrEqual":"5.4.6","versionType":"semver","status":"affected"},{"version":"5.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T19:45:17.934399Z","id":"CVE-2023-36634","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-73"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.6","matchCriteriaId":"3BEF86D0-7255-4054-8AA7-4AA411C5FE32"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"607B4B16-A019-4DB5-A3D5-845B3C81E2CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.5","matchCriteriaId":"D94D840D-28B9-45AB-952C-951710AA63CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"743763F2-D4DE-4E9D-B112-7CA27C61A423"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-123","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36638","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:09.033","lastModified":"2026-06-17T06:06:43.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions and FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions API may allow a remote and authenticated API admin user to access some system settings such as the mail server settings through the API via a stolen GUI session ID."},{"lang":"es","value":"Una vulnerabilidad de administración de privilegios inadecuada [CWE-269] en FortiManager 7.2.0 a 7.2.2, 7.0.0 a 7.0.7, 6.4.0 a 6.4.11, 6.2 todas las versiones, 6.0 todas las versiones y FortiAnalyzer 7.2.0 a 7.2 .2, 7.0.0 a 7.0.7, 6.4.0 a 6.4.11, 6.2 todas las versiones, 6.0 todas las versiones La API puede permitir que un usuario administrador de API remoto y autenticado acceda a algunas configuraciones del sistema, como la configuración del servidor de correo a través de la API a través de una ID de sesión de GUI robada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T19:45:02.088434Z","id":"CVE-2023-36638","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.12","matchCriteriaId":"F3279695-4C9A-4AB9-A3E3-81AD4AB189C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"4EE403C3-3D66-4BF4-8D3C-1FCCD429EA28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"D074D55F-B03C-4D6C-91EF-AB74590164A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.12","matchCriteriaId":"142A4113-BEF9-4112-AC7D-757A18CFF2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"F5248A7F-5122-4C07-8A4C-FE7A0BA07CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"98D47A3F-5A5B-4E5A-B145-2B1F9F29FC93"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-522","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36642","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:09.127","lastModified":"2026-06-17T06:06:44.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 3.0.0 through 7.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo [CWE-78] en la interfaz de administración de FortiTester 3.0.0 a 7.2.3 puede permitir que un atacante autenticado ejecute comandos no autorizados a través de argumentos manipulados para comandos existentes."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiTester","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.1","versionType":"semver","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.1","versionType":"semver","status":"affected"},{"version":"4.0.0","status":"affected"},{"version":"3.9.0","lessThanOrEqual":"3.9.2","versionType":"semver","status":"affected"},{"version":"3.8.0","status":"affected"},{"version":"3.7.0","lessThanOrEqual":"3.7.1","versionType":"semver","status":"affected"},{"version":"3.6.0","status":"affected"},{"version":"3.5.0","lessThanOrEqual":"3.5.1","versionType":"semver","status":"affected"},{"version":"3.4.0","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.1","versionType":"semver","status":"affected"},{"version":"3.2.0","status":"affected"},{"version":"3.1.0","status":"affected"},{"version":"3.0.0","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortitester","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*"],"versions":[{"version":"3.0.0","lessThanOrEqual":"7.2.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-25T17:29:16.163297Z","id":"CVE-2023-36642","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"7.2.3","matchCriteriaId":"5979284B-65DC-442A-9738-4347B2449338"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-501","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-40715","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:09.320","lastModified":"2026-06-17T06:19:12.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an attacker with access to the DB contents to retrieve the plaintext password of external servers configured in the device."},{"lang":"es","value":"Una vulnerabilidad de almacenamiento de texto sin cifrar de información sensible [CWE-312] en FortiTester 2.3.0 a 7.2.3 puede permitir que un atacante con acceso al contenido de la base de datos recupere la contraseña de texto plano de servidores externos configurados en el dispositivo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiTester","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.1","versionType":"semver","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.1","versionType":"semver","status":"affected"},{"version":"4.0.0","status":"affected"},{"version":"3.9.0","lessThanOrEqual":"3.9.2","versionType":"semver","status":"affected"},{"version":"3.8.0","status":"affected"},{"version":"3.7.0","lessThanOrEqual":"3.7.1","versionType":"semver","status":"affected"},{"version":"3.6.0","status":"affected"},{"version":"3.5.0","lessThanOrEqual":"3.5.1","versionType":"semver","status":"affected"},{"version":"3.4.0","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.1","versionType":"semver","status":"affected"},{"version":"3.2.0","status":"affected"},{"version":"3.1.0","status":"affected"},{"version":"3.0.0","status":"affected"},{"version":"2.9.0","status":"affected"},{"version":"2.8.0","status":"affected"},{"version":"2.7.0","status":"affected"},{"version":"2.6.0","status":"affected"},{"version":"2.5.0","status":"affected"},{"version":"2.4.0","lessThanOrEqual":"2.4.1","versionType":"semver","status":"affected"},{"version":"2.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T19:40:05.656073Z","id":"CVE-2023-40715","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-312"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndIncluding":"7.2.3","matchCriteriaId":"2EEDB613-6C76-4B86-AA8A-4C72C97AF1B7"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-465","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-40717","sourceIdentifier":"psirt@fortinet.com","published":"2023-09-13T13:15:09.507","lastModified":"2026-06-17T06:19:13.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may allow an attacker who managed to get a shell on the device to access the database via shell commands."},{"lang":"es","value":"Un uso de la vulnerabilidad de credenciales codificadas [CWE-798] en FortiTester 2.3.0 a 7.2.3 puede permitir que un atacante que logró obtener un shell en el dispositivo acceda a la base de datos mediante comandos de shell."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiTester","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.1","versionType":"semver","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.1","versionType":"semver","status":"affected"},{"version":"4.0.0","status":"affected"},{"version":"3.9.0","lessThanOrEqual":"3.9.2","versionType":"semver","status":"affected"},{"version":"3.8.0","status":"affected"},{"version":"3.7.0","lessThanOrEqual":"3.7.1","versionType":"semver","status":"affected"},{"version":"3.6.0","status":"affected"},{"version":"3.5.0","lessThanOrEqual":"3.5.1","versionType":"semver","status":"affected"},{"version":"3.4.0","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.1","versionType":"semver","status":"affected"},{"version":"3.2.0","status":"affected"},{"version":"3.1.0","status":"affected"},{"version":"3.0.0","status":"affected"},{"version":"2.9.0","status":"affected"},{"version":"2.8.0","status":"affected"},{"version":"2.7.0","status":"affected"},{"version":"2.6.0","status":"affected"},{"version":"2.5.0","status":"affected"},{"version":"2.4.0","lessThanOrEqual":"2.4.1","versionType":"semver","status":"affected"},{"version":"2.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T19:40:14.020771Z","id":"CVE-2023-40717","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndIncluding":"7.2.3","matchCriteriaId":"2EEDB613-6C76-4B86-AA8A-4C72C97AF1B7"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-245","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-22298","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:10.837","lastModified":"2026-06-17T04:28:11.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version 1.1.0, FortiIsolator version 1.2.0 through 1.2.2, FortiIsolator version 2.0.0 through 2.0.1, FortiIsolator version 2.1.0 through 2.1.2, FortiIsolator version 2.2.0, FortiIsolator version 2.3.0 through 2.3.4 allows attacker to execute arbitrary OS commands in the underlying shell via specially crafted input parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en: \nFortinet FortiIsolator versión 1.0.0, \nFortiIsolator versión 1.1.0, \nFortiIsolator versión 1.2.0 a 1.2.2, \nFortiIsolator versión 2.0.0 a 2.0. 1, \nFortiIsolator versión 2.1.0 a 2.1.2, \nFortiIsolator versión 2.2.0, \nFortiIsolator versión 2.3.0 a 2.3.4. \nPermite al atacante ejecutar comandos arbitrarios del sistema operativo en el shell subyacente a través de parámetros de entrada especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiIsolator","defaultStatus":"unaffected","versions":[{"version":"2.3.0","lessThanOrEqual":"2.3.3","versionType":"semver","status":"affected"},{"version":"2.2.0","status":"affected"},{"version":"2.1.0","lessThanOrEqual":"2.1.2","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.1","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.2","versionType":"semver","status":"affected"},{"version":"1.1.0","status":"affected"},{"version":"1.0.0","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiisolator","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiisolator:1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:1.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","status":"affected"},{"version":"1.1.0","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.2.1","status":"affected"},{"version":"1.2.2","status":"affected"},{"version":"2.0.0","status":"affected"},{"version":"2.0.1","status":"affected"},{"version":"2.1.0","status":"affected"},{"version":"2.1.1","status":"affected"},{"version":"2.1.2","status":"affected"},{"version":"2.2.0","status":"affected"}]},{"vendor":"fortinet","product":"fortiisolator","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiisolator:2.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.3:*:*:*:*:*:*:*"],"versions":[{"version":"2.3.0","lessThanOrEqual":"2.3.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-18T19:43:19.024763Z","id":"CVE-2022-22298","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndIncluding":"2.3.4","matchCriteriaId":"23294BAD-8A68-41FF-9C58-B525D8732B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6CFE83AE-1395-4205-B805-A508E53DF215"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C3FA24F-4D8F-48E3-BAC4-654E0DBCA800"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F67431CA-CA69-4D8B-B1EF-321828DBEEBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E43F6415-298C-4AC4-BC1F-8E7CDD367AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9EC84748-C9CA-412E-91EE-F341C1B975FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"067563F7-3868-40DD-BE14-9D65FDAB940F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"40EE8089-FB10-4CA5-BA41-F6A2ED32E8DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"472F7F9F-DA6F-4017-87FD-288CEE40D2F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6CB1042D-A702-4AC9-9A13-EC267210A5DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9D19301A-FC50-4684-9004-CF1A36230B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FA0E98DE-F384-43D1-91DB-972CB50A53B6"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-233","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-21-233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-25604","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.083","lastModified":"2026-06-17T05:41:35.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0 allows a local attacker to access plaintext passwords in the RADIUS logs."},{"lang":"es","value":"Una inserción de información confidencial en una vulnerabilidad del archivo de registro en Fortinet FortiGuest 1.0.0 permite a un atacante local acceder a contraseñas de texto plano en los registros RADIUS."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiGuest","defaultStatus":"unaffected","versions":[{"version":"1.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-18T19:36:57.817296Z","id":"CVE-2023-25604","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiguest:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4C51D65F-0761-4072-A6C8-833E57915C23"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-052","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-25607","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.147","lastModified":"2026-06-17T05:41:36.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions, FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions and FortiADC  7.1.0, 7.0.0 through 7.0.3, 6.2 all versions, 6.1 all versions,  6.0 all versions management interface may allow an authenticated attacker with at least READ permissions on system settings to execute arbitrary commands on the underlying shell due to an unsafe usage of the wordexp function."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo ('inyección de comando del sistema operativo') [CWE-78] en: \nFortiManager 7.2.0 hasta 7.2.2, 7.0.0 hasta 7.0.7, 6.4.0 hasta 6.4.11, 6.2 todas las versiones, 6.0 todas las versiones, \nFortiAnalyzer 7.2.0 hasta 7.2.2, 7.0.0 hasta 7.0.7, 6.4.0 hasta 6.4.11, 6.2 todas las versiones, 6.0 todas las versiones y \nFortiADC 7.1.0, 7.0.0 hasta 7.0.3, 6.2 todas las versiones, 6.1 todas las versiones, 6.0 todas las versiones. \nLa interfaz de administración puede permitir que un atacante autenticado con al menos permisos de LECTURA en la configuración del sistema ejecute comandos arbitrarios en el shell subyacente debido a un uso inseguro de la función wordexp."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:57:00.870250Z","id":"CVE-2023-25607","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"F5275C5C-B6FD-4456-B143-ECDD282150C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"4488C266-0436-40AD-BD99-A228787285AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B35D8D53-448B-474C-B7CB-324CB4ED7A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"2318A6AC-AA3E-4604-968C-35A46E79FCB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"285EC81A-34F0-4153-82DE-6A49C05EB240"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.11","matchCriteriaId":"337E7B95-CC70-41BB-8F0A-FE40D39F23DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"4EC99242-BA69-4046-A981-E37ACDC62D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FDD88F7C-8136-4CFF-AF1E-9AE928878C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CE9DDF78-DBFF-43B9-A4ED-145029ED9B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"8DFFD873-3F9B-41D8-92E6-09F84712BCE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"09105C5B-378F-4E1A-B395-F43573983A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.11","matchCriteriaId":"6DA1F7EC-363D-432C-9225-3A217D9F3CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"A57331B0-1B5B-4E70-BD82-E87715CDD921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"407755AA-0C23-4C5B-88A2-8BC12A3D268D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A0A1111-4054-4C7B-B333-E13A8684207B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"81E5E264-0F74-4C45-BC90-384E572A14B8"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-352","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-33301","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.217","lastModified":"2026-06-17T06:01:31.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in Fortinet FortiOS 7.2.0 - 7.2.4 and 7.4.0 allows an attacker to access a restricted resource from a non trusted host."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado en Fortinet FortiOS 7.2.0 - 7.2.4 y 7.4.0 permite a un atacante acceder a un recurso restringido desde un host no confiable."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-18T17:46:48.606324Z","id":"CVE-2023-33301","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-139","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34985","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.283","lastModified":"2026-06-17T06:04:13.270","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite al atacante ejecutar código o comandos no autorizados a través de parámetros de solicitud HTTP get específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"custom","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T18:55:39.269211Z","id":"CVE-2023-34985","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-141","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34986","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.343","lastModified":"2026-06-17T06:04:13.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite al atacante ejecutar código o comandos no autorizados a través de parámetros de solicitud HTTP get específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"custom","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T19:02:01.036551Z","id":"CVE-2023-34986","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-141","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34987","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.403","lastModified":"2026-06-17T06:04:13.527","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite al atacante ejecutar código o comandos no autorizados a través de parámetros de solicitud HTTP get específicamente manipulados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"custom","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T19:05:52.165332Z","id":"CVE-2023-34987","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-141","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34988","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.463","lastModified":"2026-06-17T06:04:13.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite al atacante ejecutar código o comandos no autorizados a través de parámetros de solicitud HTTP get específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"custom","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T18:38:29.324998Z","id":"CVE-2023-34988","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-141","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34989","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.520","lastModified":"2026-06-17T06:04:13.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite al atacante ejecutar código o comandos no autorizados a través de parámetros de solicitud HTTP get específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"custom","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T19:08:01.040370Z","id":"CVE-2023-34989","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-141","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34992","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.607","lastModified":"2026-06-17T06:04:14.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet  allows attacker to execute unauthorized code or commands via crafted API requests."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiSIEM versión 7.0.0 y 6.7.0 a 6.7.5 y 6.6.0 a 6.6.3 y 6.5.0 a 6.5.1 y Las versiones 6.4.0 a 6.4.2 permiten al atacante ejecutar código o comandos no autorizados a través de solicitudes API manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.5","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortisiem","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.8","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.2","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortisiem","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.8","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.2","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortisiem","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.8","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.2","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortisiem","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.8","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.2","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortisiem","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.8","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":10.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-29T14:18:03.916054Z","id":"CVE-2023-34992","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.0","versionEndIncluding":"6.6.3","matchCriteriaId":"EB301503-0ECB-4D21-B341-ACF0F302CF85"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndIncluding":"6.7.5","matchCriteriaId":"20FD2D69-73DD-4EA4-ADE6-EB4BCFED7AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C48AC74D-9FBE-4194-9BE8-FD2D6A0EC788"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BFFA27A5-0168-4261-9A04-D2DBB0A9946D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2035DFA0-FF3A-4BBF-ABFE-0E310A7C668B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A391C353-BD26-4262-B86F-E3FBF8915DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD5BE55-0990-4646-ADA7-9A30981D4DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CAB28BA6-45B6-422B-9901-300B6024F703"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-130","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34993","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.670","lastModified":"2026-06-17T06:04:14.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite al atacante ejecutar código o comandos no autorizados a través de parámetros de solicitud HTTP get específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"custom","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T19:23:01.310268Z","id":"CVE-2023-34993","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-140","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36547","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.827","lastModified":"2026-06-17T06:06:30.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite al atacante ejecutar código o comandos no autorizados a través de parámetros de solicitud HTTP get específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"custom","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T20:20:28.901406Z","id":"CVE-2023-36547","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-140","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36548","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.890","lastModified":"2026-06-17T06:06:30.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite al atacante ejecutar código o comandos no autorizados a través de parámetros de solicitud HTTP get específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T14:19:20.637531Z","id":"CVE-2023-36548","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-140","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36549","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:11.953","lastModified":"2026-06-17T06:06:30.773","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite al atacante ejecutar código o comandos no autorizados a través de parámetros de solicitud HTTP get específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-15T16:22:14.784433Z","id":"CVE-2023-36549","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-140","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36550","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.017","lastModified":"2026-06-17T06:06:30.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite al atacante ejecutar código o comandos no autorizadosa través de parámetros de solicitud HTTP get específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"custom","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T19:17:19.201459Z","id":"CVE-2023-36550","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-140","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36555","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.077","lastModified":"2026-06-17T06:06:31.473","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via the SAML and Security Fabric components."},{"lang":"es","value":"Una neutralización inadecuada de etiquetas html relacionadas con scripts en una página web (xss básico) en Fortinet FortiOS 7.2.0 - 7.2.4 permite a un atacante ejecutar código o comandos no autorizados a través de los componentes SAML y Security Fabric."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","baseScore":3.9,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.5,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-18T18:10:14.675356Z","id":"CVE-2023-36555","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-80"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-104","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36556","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.140","lastModified":"2026-06-17T06:06:31.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.5 and below 6.4.7 allows an authenticated attacker to login on other users accounts from the same web domain via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una vulnerabilidad de autorización incorrecta [CWE-863] en el correo web FortiMail versión 7.2.0 a 7.2.2, versión 7.0.0 a 7.0.5 e inferior a 6.4.7 permite a un atacante autenticado iniciar sesión en cuentas de otros usuarios desde el mismo dominio web a través de solicitudes HTTP o HTTPs manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:57:32.689334Z","id":"CVE-2023-36556","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"01F784BF-4F89-4938-9150-F911E3EB6CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"AEDC7EE8-084C-4F9E-A510-E283FCDF9832"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"7D25AB0A-3B0C-40B5-8D7D-78DA7567F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"3A56C791-6437-4BA5-922C-3352FF5D8431"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BD3A9BF6-5A5E-4D25-BDB4-CD9AA9DA8580"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"22B39FED-3BE4-4362-A071-93A235CE6089"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"235B3CB6-E9A3-4849-AF87-954693BA2EDE"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-202","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36637","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.200","lastModified":"2026-06-17T06:06:43.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to inject HTML tags in FortiMail's calendar via input fields."},{"lang":"es","value":"Una neutralización inadecuada de la vulnerabilidad de entrada durante la generación de páginas web [CWE-79] en FortiMail versión 7.2.0 a 7.2.2 y anteriores a 7.0.5 permite a un atacante autenticado inyectar etiquetas HTML en el calendario de FortiMail a través de campos de entrada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","baseScore":3.5,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-18T20:28:17.212998Z","id":"CVE-2023-36637","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndIncluding":"7.0.5","matchCriteriaId":"2D351E8A-04A0-4E92-84AE-2BD5E5B37274"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BD3A9BF6-5A5E-4D25-BDB4-CD9AA9DA8580"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"22B39FED-3BE4-4362-A071-93A235CE6089"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"235B3CB6-E9A3-4849-AF87-954693BA2EDE"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-194","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-37935","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.267","lastModified":"2026-06-17T06:08:56.467","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view plaintext passwords of remote services such as RDP or VNC, if the attacker is able to read the GET requests to those services."},{"lang":"es","value":"Un uso del método de solicitud GET con vulnerabilidad de cadenas de consulta confidenciales en Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 y 7.4.0 permite a un atacante ver contraseñas en texto plano de servicios remotos como RDP o VNC, si el atacante puede leer las solicitudes GET de esos servicios."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-19T20:21:44.903917Z","id":"CVE-2023-37935","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-598"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"BA582D59-C740-4AE7-83CA-C09A1D0EDA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.5","matchCriteriaId":"A6E44123-995C-4E08-84B5-FF8C76B67B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-120","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-37939","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.333","lastModified":"2026-06-17T06:08:56.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions, may allow a local authenticated attacker with no Administrative privileges to retrieve the list of files or folders excluded from malware scanning."},{"lang":"es","value":"Una exposición de información confidencial a una vulnerabilidad de actor no autorizado [CWE-200] en FortiClient para Windows 7.2.0, 7.0 todas las versiones, 6.4 todas las versiones, 6.2 todas las versiones, Linux 7.2.0, 7.0 todas las versiones, 6.4 todas las versiones, 6.2 todas y Mac 7.2.0 a 7.2.1, 7.0 todas las versiones, 6.4 todas las versiones, 6.2 todas las versiones, pueden permitir que un atacante local autenticado sin privilegios administrativos recupere la lista de archivos o carpetas excluidas del análisis de malware."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientLinux","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.6","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-18T20:26:36.640081Z","id":"CVE-2023-37939","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"2F0755CA-2961-4F74-8044-761178AB0312"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"6EE22D2E-DE73-47FE-91DE-4C4B8FDB4C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"16EB2BBF-5729-41B5-A093-36E4B2A2C90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.10","matchCriteriaId":"525ECB5F-0FCE-4C9C-B939-66667367F573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.10","matchCriteriaId":"4C015491-F83B-4569-B0BB-0877C1D89C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"8F15899F-6A19-4FD6-B736-C42F377B2F90"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"F1C94527-471A-40B2-9030-6243BAE86579"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"8E16F30C-4167-462E-B67E-6B8A449CC591"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:linux:*:*","matchCriteriaId":"88271718-0DD4-4717-B403-1B44E2E56C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:macos:*:*","matchCriteriaId":"21028180-8FA9-43B3-AE71-D4967E7B7DE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:windows:*:*","matchCriteriaId":"CEC62C6E-AA05-4AE9-86C5-47D6763206AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.1:*:*:*:*:macos:*:*","matchCriteriaId":"D1BD3792-2AE7-47F9-94E5-376C298EE437"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-235","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-40718","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.560","lastModified":"2026-06-17T06:19:13.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packets."},{"lang":"es","value":"Un conflicto de interpretación en las versiones 7.321, 7.166 y 6.158 de Fortinet IPS Engine permite a un atacante evadir las funciones de IPS a través de paquetes TCP manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"IPS Engine","defaultStatus":"unaffected","versions":[{"version":"7.321","status":"affected"},{"version":"7.166","status":"affected"},{"version":"6.158","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios_ips_engine","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"7.321","versionType":"custom","status":"affected"},{"version":"0","lessThanOrEqual":"7.166","versionType":"custom","status":"affected"},{"version":"0","lessThanOrEqual":"6.158","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-18T18:59:54.335454Z","id":"CVE-2023-40718","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-436"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-436"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"7.312","matchCriteriaId":"76621CA9-15A3-45C7-89F6-00FF2F0DB7B5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"7.165","matchCriteriaId":"E527DD20-7553-4CAD-BFFF-02D2C4DFFADC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"39A6C2A7-21A4-4BB5-A3B6-9466E5CEA296"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"6.158","matchCriteriaId":"E17821E5-7836-4EEA-A383-66CBCD45B258"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.13","matchCriteriaId":"B153B056-24AE-41C4-B644-65E080C18360"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-090","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41675","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.620","lastModified":"2026-06-17T06:22:35.790","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated remote attacker to crash the WAD process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection."},{"lang":"es","value":"Una vulnerabilidad de use-after-free [CWE-416] en FortiOS versión 7.2.0 a 7.2.4 y versión 7.0.0 a 7.0.10 y FortiProxy versión 7.2.0 a 7.2.2 y versión 7.0.0 a 7.0.8 puede permitir un atacante remoto no autenticado bloquee el proceso WAD a través de múltiples paquetes manipulados que alcanzan políticas de proxy o políticas de firewall con modo proxy junto con una inspección profunda de paquetes SSL."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-18T20:02:08.865165Z","id":"CVE-2023-41675","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"C83139FA-7195-4171-8BC6-CC4F9379C7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5F302F8-482A-4DA9-BDD9-63886B202B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91E7F209-D645-48EC-BB5F-E730E55E8EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7028AFDA-6CB5-4DB0-8977-9BA995DE14C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"6BB39159-5B36-415A-A57E-AFAFD7B848CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-184","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41679","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.683","lastModified":"2026-06-17T06:22:36.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions may allow a remote and authenticated attacker with at least \"device management\" permission on his profile and belonging to a specific ADOM to add and delete CLI script on other ADOMs"},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en la interfaz de administración de FortiManager 7.2.0 a 7.2.2, 7.0.0 a 7.0.7, 6.4.0 a 6.4.11, 6.2 todas las versiones, 6.0 todas las versiones puede permitir a un atacante remoto no autenticado con al menos permiso de \"administración de dispositivos\" en su perfil y perteneciente a un ADOM específico agregar y eliminar scripts CLI en otros ADOM."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.1,"impactScore":5.8}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:56:19.689937Z","id":"CVE-2023-41679","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"8DFFD873-3F9B-41D8-92E6-09F84712BCE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"09105C5B-378F-4E1A-B395-F43573983A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.11","matchCriteriaId":"6DA1F7EC-363D-432C-9225-3A217D9F3CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"A57331B0-1B5B-4E70-BD82-E87715CDD921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"407755AA-0C23-4C5B-88A2-8BC12A3D268D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A0A1111-4054-4C7B-B333-E13A8684207B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"81E5E264-0F74-4C45-BC90-384E572A14B8"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-062","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41838","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.743","lastModified":"2026-06-17T06:22:54.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en FortiManager 7.4.0 y 7.2.0 a 7.2.3 puede permitir que un atacante ejecute código o comandos no autorizados a través de FortiManager cli."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-18T19:03:36.387880Z","id":"CVE-2023-41838","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.11","matchCriteriaId":"AB37EC26-3458-4AB4-91E5-58B75E587F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.12","matchCriteriaId":"041E0C3F-E9B6-46E3-87D4-718FAC0C024E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"8B74F415-4705-4923-945F-CB393326F78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"B31BB84A-E622-4911-AAB4-41E57F661A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9AF01-72FD-4942-A95E-71A7609B6977"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.11","matchCriteriaId":"67777F42-09E1-4651-807C-325A5F0D8A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.12","matchCriteriaId":"0FC51DD4-5232-41CD-B85A-8AF8DB74A322"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"7AEFC8D4-6358-4A81-BCF3-D162871F59F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"7C7C73B7-2AE1-4FC2-A37A-89A085796D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-169","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41841","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.813","lastModified":"2026-06-17T06:22:54.787","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform elevated actions."},{"lang":"es","value":"Una vulnerabilidad de autorización inadecuada en Fortinet FortiOS 7.0.0 - 7.0.11 y 7.2.0 - 7.2.4 permite que un atacante que pertenece al perfil prof-admin realice acciones elevadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-11-15T16:38:45.618240Z","id":"CVE-2023-41841","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.11","matchCriteriaId":"C2573C90-BE6A-4D5D-A223-F09213318909"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-318","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-42782","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.873","lastModified":"2026-06-17T06:24:29.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below 7.2.3 allows a remote unauthenticated attacker to send messages to the syslog server of FortiAnalyzer via the knoweldge of an authorized device serial number."},{"lang":"es","value":"Una vulnerabilidad de verificación insuficiente de autenticidad de datos [CWE-345] en FortiAnalyzer versión 7.4.0 y anteriores a 7.2.3 permite que un atacante remoto no autenticado envíe mensajes al servidor syslog de FortiAnalyzer a través del conocimiento de un número de serie de dispositivo autorizado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.13","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortianalyzer","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"custom","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.13","versionType":"custom","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortianalyzer-bigdata","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortianalyzer-bigdata:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"custom","status":"affected"},{"version":"7.0","status":"affected"},{"version":"6.4","status":"affected"},{"version":"6.2","status":"affected"}]},{"vendor":"fortinet","product":"fortimanager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"custom","status":"affected"},{"version":"6.4","status":"affected"},{"version":"6.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-18T20:37:50.243924Z","id":"CVE-2023-42782","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-345"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"285EC81A-34F0-4153-82DE-6A49C05EB240"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.13","matchCriteriaId":"56D6A507-5B18-4F62-9B08-98122FB2F23B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"CCE23C15-B42C-48DF-9435-27D5143F0B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"B31BB84A-E622-4911-AAB4-41E57F661A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9AF01-72FD-4942-A95E-71A7609B6977"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-221","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-42787","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.930","lastModified":"2026-08-12T12:17:20.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution."},{"lang":"es","value":"Una vulnerabilidad de aplicación de seguridad del lado del servidor [CWE-602] en Fortinet FortiManager versión 7.4.0 y anteriores a 7.2.3 y FortiAnalyzer versión 7.4.0 y anteriores a 7.2.3 puede permitir que un atacante remoto con privilegios bajos acceda a una consola web privilegiada a través de la ejecución de código del lado del cliente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer-BigData","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.2.5:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.5","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.2.5","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.1","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-602"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"285EC81A-34F0-4153-82DE-6A49C05EB240"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.13","matchCriteriaId":"56D6A507-5B18-4F62-9B08-98122FB2F23B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"CCE23C15-B42C-48DF-9435-27D5143F0B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"B31BB84A-E622-4911-AAB4-41E57F661A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9AF01-72FD-4942-A95E-71A7609B6977"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"09105C5B-378F-4E1A-B395-F43573983A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.13","matchCriteriaId":"B632AF2E-739B-4EBA-8780-8AE999C62F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"FA1523A4-BC32-4618-897D-9B5709512FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"7C7C73B7-2AE1-4FC2-A37A-89A085796D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-187","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-42788","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:12.987","lastModified":"2026-06-17T06:24:30.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManager & FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.8, version 6.4.0 through 6.4.12 and version 6.2.0 through 6.2.11 may allow a local attacker with low privileges to execute unauthorized code via specifically crafted arguments to a CLI command"},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo ('Inyección de comando del sistema operativo') [CWE-78] en FortiManager y FortiAnalyzer versión 7.4.0, versión 7.2.0 a 7.2.3, versión 7.0.0 a 7.0.8 , las versiones 6.4.0 a 6.4.12 y 6.2.0 a 6.2.11 pueden permitir que un atacante local con privilegios bajos ejecute código no autorizado a través de argumentos específicamente manipulados para un comando CLI"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:58:28.753630Z","id":"CVE-2023-42788","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.11","matchCriteriaId":"AB37EC26-3458-4AB4-91E5-58B75E587F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.12","matchCriteriaId":"041E0C3F-E9B6-46E3-87D4-718FAC0C024E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"8B74F415-4705-4923-945F-CB393326F78D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"B31BB84A-E622-4911-AAB4-41E57F661A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9AF01-72FD-4942-A95E-71A7609B6977"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.11","matchCriteriaId":"67777F42-09E1-4651-807C-325A5F0D8A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.12","matchCriteriaId":"0FC51DD4-5232-41CD-B85A-8AF8DB74A322"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"7AEFC8D4-6358-4A81-BCF3-D162871F59F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"7C7C73B7-2AE1-4FC2-A37A-89A085796D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-167","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-qpv8-g6qv-rf8p","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-qpv8-g6qv-rf8p","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-44249","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-10T17:15:13.047","lastModified":"2026-06-17T06:27:12.980","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 allows a remote attacker with low privileges to read sensitive information via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de omisión de autorización a través de clave controlada por el usuario [CWE-639] en Fortinet FortiManager versión 7.4.0 y anteriores a 7.2.3 y FortiAnalyzer versión 7.4.0 y anteriores a 7.2.3 permite a un atacante remoto con privilegios bajos leer información confidencial a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.13","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.13","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"285EC81A-34F0-4153-82DE-6A49C05EB240"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.13","matchCriteriaId":"56D6A507-5B18-4F62-9B08-98122FB2F23B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"CCE23C15-B42C-48DF-9435-27D5143F0B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"8E0D5DF6-69C6-4325-94D3-D7A44862F62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9AF01-72FD-4942-A95E-71A7609B6977"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"09105C5B-378F-4E1A-B395-F43573983A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.13","matchCriteriaId":"B632AF2E-739B-4EBA-8780-8AE999C62F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"FA1523A4-BC32-4618-897D-9B5709512FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"5BC35BBC-5F0C-4802-8F00-643D465D43E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-201","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-33303","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-13T15:15:43.930","lastModified":"2026-06-17T06:01:32.237","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows attacker to execute unauthorized code or commands via api request"},{"lang":"es","value":"Una caducidad insuficiente de la sesión en Fortinet FortiEDR versión 5.0.0 a 5.0.1 permite al atacante ejecutar código o comandos no autorizados a través de una solicitud a la API"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiEDR","defaultStatus":"unaffected","versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:55:44.057314Z","id":"CVE-2023-33303","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-613"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.1","matchCriteriaId":"1B263F56-9916-4FE7-A924-5E719825C810"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-007","source":"psirt@fortinet.com","tags":["Patch","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-41680","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-13T15:15:44.000","lastModified":"2026-06-17T06:22:36.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.1, FortiSandbox 4.2.1 through 4.2.5, FortiSandbox 4.0.0 through 4.0.3, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4.1 allows attacker to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de la página web (\"cross-site scripting\") en Fortinet FortiSandbox versión 4.4.1 y 4.4.0 y 4.2.0 a 4.2.5 y 4.0.0 a 4.0.3 y 3.2.0 a 3.2 .4 y 3.1.0 hasta 3.1.5 y 3.0.0 hasta 3.0.7 y 2.5.0 hasta 2.5.2 y 2.4.1 permiten a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.1","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.5","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"},{"version":"2.5.0","lessThanOrEqual":"2.5.2","versionType":"semver","status":"affected"},{"version":"2.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:55:06.572746Z","id":"CVE-2023-41680","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndIncluding":"2.5.2","matchCriteriaId":"BE6821DD-58BA-4E28-AE24-2F121DB60C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.7","matchCriteriaId":"7D1EE4D7-4087-4A4A-9171-F48B1C5915C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.5","matchCriteriaId":"2C47A3DB-A02A-488D-B0E1-867A19CE43B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.4","matchCriteriaId":"16BB4915-1330-45E5-887E-AD97C29F500B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.3","matchCriteriaId":"BDE7AD84-C361-4C18-9655-10698982EB17"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.5","matchCriteriaId":"4641E869-8B7B-4DD7-89A9-1EA0BCE51C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndIncluding":"4.4.1","matchCriteriaId":"9455DCAF-C39D-4C93-AFA2-48B5C1CAD0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B260DC-5C02-400B-9595-4E452B235074"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-311","source":"psirt@fortinet.com","tags":["Patch","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-41681","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-13T15:15:44.060","lastModified":"2026-06-17T06:22:36.673","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.1, FortiSandbox 4.2.1 through 4.2.5, FortiSandbox 4.0.0 through 4.0.3, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4.1 allows attacker to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de la página web (\"cross-site scripting\") en Fortinet FortiSandbox versión 4.4.1 y 4.4.0 y 4.2.0 a 4.2.5 y 4.0.0 a 4.0.3 y 3.2.0 a 3.2 .4 y 3.1.0 hasta 3.1.5 y 3.0.0 hasta 3.0.7 y 2.5.0 hasta 2.5.2 y 2.4.1 permiten a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.1","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.5","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"},{"version":"2.5.0","lessThanOrEqual":"2.5.2","versionType":"semver","status":"affected"},{"version":"2.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-16T20:37:40.904294Z","id":"CVE-2023-41681","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndIncluding":"2.5.2","matchCriteriaId":"BE6821DD-58BA-4E28-AE24-2F121DB60C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.7","matchCriteriaId":"7D1EE4D7-4087-4A4A-9171-F48B1C5915C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.5","matchCriteriaId":"2C47A3DB-A02A-488D-B0E1-867A19CE43B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.4","matchCriteriaId":"16BB4915-1330-45E5-887E-AD97C29F500B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.3","matchCriteriaId":"BDE7AD84-C361-4C18-9655-10698982EB17"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.5","matchCriteriaId":"4641E869-8B7B-4DD7-89A9-1EA0BCE51C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndIncluding":"4.4.1","matchCriteriaId":"9455DCAF-C39D-4C93-AFA2-48B5C1CAD0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B260DC-5C02-400B-9595-4E452B235074"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-311","source":"psirt@fortinet.com","tags":["Patch","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-41682","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-13T15:15:44.123","lastModified":"2026-06-17T06:22:36.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0, FortiSandbox 4.2.1 through 4.2.5, FortiSandbox 4.0.0 through 4.0.3, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4 all versions allows attacker to denial of service via crafted http requests."},{"lang":"es","value":"Una limitación inadecuada de un nombre de ruta a un directorio restringido (\"path traversal\") en Fortinet FortiSandbox versión 4.4.0 y 4.2.0 a 4.2.5 y 4.0.0 a 4.0.3 y 3.2.0 a 3.2.4 y 2.5. 0 a 2.5.2 y 2.4.1 y 2.4.0 permiten al atacante denegar el servicio a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.5","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"},{"version":"2.5.0","lessThanOrEqual":"2.5.2","versionType":"semver","status":"affected"},{"version":"2.4.0","lessThanOrEqual":"2.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-16T20:42:11.608213Z","id":"CVE-2023-41682","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndIncluding":"2.4.1","matchCriteriaId":"35A16A53-EF93-4AA5-BED7-4306B6114E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndIncluding":"2.5.2","matchCriteriaId":"BE6821DD-58BA-4E28-AE24-2F121DB60C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.4","matchCriteriaId":"16BB4915-1330-45E5-887E-AD97C29F500B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.3","matchCriteriaId":"BDE7AD84-C361-4C18-9655-10698982EB17"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.5","matchCriteriaId":"4641E869-8B7B-4DD7-89A9-1EA0BCE51C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0CD764B6-2235-4C06-8A0C-AF5889B027F7"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-280","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41836","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-13T15:15:44.183","lastModified":"2026-06-17T06:22:54.373","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0, FortiSandbox 4.2.1 through 4.2.4, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0.4 through 3.0.7 allows attacker to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de la página web (\"cross-site scripting\") en Fortinet FortiSandbox versión 4.4.0 y 4.2.0 a 4.2.4, y 4.0.0 a 4.0.4 y 3.2.0 a 3.2.4 y Las versiones 3.1.0 a 3.1.5 y 3.0.4 a 3.0.7 permiten a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.4","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.4","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","baseScore":3.5,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-16T20:36:16.749208Z","id":"CVE-2023-41836","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.4","versionEndIncluding":"3.0.7","matchCriteriaId":"71C81F0A-7F0D-4C8E-A17A-E252EDF34283"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.5","matchCriteriaId":"2C47A3DB-A02A-488D-B0E1-867A19CE43B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.4","matchCriteriaId":"16BB4915-1330-45E5-887E-AD97C29F500B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.4","matchCriteriaId":"5197A546-B82E-4407-9CC4-8DF4C4323605"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.4","matchCriteriaId":"34072229-3DBA-4317-8BB0-41A657A52C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0CD764B6-2235-4C06-8A0C-AF5889B027F7"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-215","source":"psirt@fortinet.com","tags":["Patch","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-41843","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-13T15:15:44.243","lastModified":"2026-06-17T06:22:55.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.1, FortiSandbox 4.2.1 through 4.2.5, FortiSandbox 4.0.0 through 4.0.3, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4.1 allows attacker to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de la página web (\"cross-site scripting\") en Fortinet FortiSandbox versión 4.4.1 y 4.4.0 y 4.2.0 a 4.2.5 y 4.0.0 a 4.0.3 permite al atacante ejecutar código no autorizado o comandos a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.1","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.5","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"},{"version":"2.5.0","lessThanOrEqual":"2.5.2","versionType":"semver","status":"affected"},{"version":"2.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:54:25.407562Z","id":"CVE-2023-41843","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndIncluding":"2.5.2","matchCriteriaId":"BE6821DD-58BA-4E28-AE24-2F121DB60C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.7","matchCriteriaId":"7D1EE4D7-4087-4A4A-9171-F48B1C5915C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.5","matchCriteriaId":"2C47A3DB-A02A-488D-B0E1-867A19CE43B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.4","matchCriteriaId":"16BB4915-1330-45E5-887E-AD97C29F500B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.3","matchCriteriaId":"BDE7AD84-C361-4C18-9655-10698982EB17"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.5","matchCriteriaId":"4641E869-8B7B-4DD7-89A9-1EA0BCE51C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndIncluding":"4.4.1","matchCriteriaId":"9455DCAF-C39D-4C93-AFA2-48B5C1CAD0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F6B260DC-5C02-400B-9595-4E452B235074"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-273","source":"psirt@fortinet.com","tags":["Patch","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-44256","sourceIdentifier":"psirt@fortinet.com","published":"2023-10-20T10:15:12.870","lastModified":"2026-06-17T06:27:14.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal servers or perform a local port scan via a crafted HTTP request."},{"lang":"es","value":"Una vulnerabilidad de server-side request forgery [CWE-918] en Fortinet FortiAnalyzer versión 7.4.0, versión 7.2.0 a 7.2.3 y anteriores a 7.0.8 y FortiManager versión 7.4.0, versión 7.2.0 a 7.2.3 y anteriores 7.0.8 permite a un atacante remoto con privilegios bajos ver datos confidenciales de servidores internos o realizar un escaneo de puerto local a través de una solicitud HTTP manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.2","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.8","lessThanOrEqual":"6.4.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortianalyzer","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"custom","status":"affected"},{"version":"7.0.2","lessThanOrEqual":"7.0.8","versionType":"custom","status":"affected"},{"version":"6.4.8","lessThanOrEqual":"6.4.13","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortimanager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-12T14:18:34.268176Z","id":"CVE-2023-44256","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.8","versionEndIncluding":"6.4.13","matchCriteriaId":"C9BAF9ED-0E72-448F-BA35-A07541B900F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.2","versionEndIncluding":"7.0.8","matchCriteriaId":"A1650789-366E-4CA3-814E-DC68B9F318DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"B31BB84A-E622-4911-AAB4-41E57F661A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9AF01-72FD-4942-A95E-71A7609B6977"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.8","matchCriteriaId":"7AEFC8D4-6358-4A81-BCF3-D162871F59F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"7C7C73B7-2AE1-4FC2-A37A-89A085796D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-19-039","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-2hc5-p5mc-8vrh","source":"psirt@fortinet.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-19-039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-2hc5-p5mc-8vrh","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-26205","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:28.260","lastModified":"2026-06-17T05:42:49.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en la función de automatización FortiADC 7.1.0 a 7.1.2, 7.0 todas las versiones, 6.2 todas las versiones, 6.1 todas las versiones puede permitir que un atacante autenticado con pocos privilegios escale sus privilegios a super_admin a través de una configuración manipulada del script CLI de automatización de fabric."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-22T20:52:25.980870Z","id":"CVE-2023-26205","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"F5275C5C-B6FD-4456-B143-ECDD282150C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"302D8FF0-69B6-451A-9B5B-E28B2FAA30D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B35D8D53-448B-474C-B7CB-324CB4ED7A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"933701AE-43E3-4260-973B-4EA09C375965"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F3029D7-4C37-4468-9CCD-45C7259EFF2C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-292","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-28002","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:29.137","lastModified":"2026-06-17T05:46:21.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.12, 6.4 all versions, 6.2 all versions, 6.0 all versions and VMs may allow a local attacker with admin privileges to boot a malicious image on the device and bypass the filesystem integrity check in place."},{"lang":"es","value":"Una vulnerabilidad de validación inadecuada del valor de verificación de integridad [CWE-354] en FortiOS 7.2.0 a 7.2.3, 7.0.0 a 7.0.12, 6.4 todas las versiones, 6.2 todas las versiones, 6.0 todas las versiones y FortiProxy 7.2 todas las versiones, 7.0 todas versiones, 2.0 todas las versiones. Las máquinas virtuales pueden permitir que un atacante local con privilegios de administrador inicie una imagen maliciosa en el dispositivo y omita la verificación de integridad del sistema de archivos vigente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.16","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"2.0.0","lessThanOrEqual":"2.0.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.17","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-11T14:23:13.417182Z","id":"CVE-2023-28002","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-354"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.13","matchCriteriaId":"10E4FB93-7111-4F2A-8D5A-F276261D0E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.13","matchCriteriaId":"DA5DEE06-6CEC-4EDE-BEA7-EDBE65EBF8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.7","matchCriteriaId":"9D052D03-B855-4C9E-BCF9-7AEE6464050B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.17","matchCriteriaId":"0135464C-532C-430D-A76C-2FCDE4C991D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.14","matchCriteriaId":"A2B52E22-C64D-4142-885E-6C44FA670574"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"BA582D59-C740-4AE7-83CA-C09A1D0EDA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"813E179E-B948-4480-A5B1-B0ED562A41BC"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-396","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-33304","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:30.133","lastModified":"2026-06-17T06:01:32.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials."},{"lang":"es","value":"Un uso de vulnerabilidad de credenciales codificadas en Fortinet FortiClient Windows 7.0.0 - 7.0.9 y 7.2.0 - 7.2.1 permite a un atacante omitir las protecciones del sistema mediante el uso de credenciales estáticas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:11:01.070978Z","id":"CVE-2023-33304","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"8E16F30C-4167-462E-B67E-6B8A449CC591"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:windows:*:*","matchCriteriaId":"CEC62C6E-AA05-4AE9-86C5-47D6763206AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.1:*:*:*:*:windows:*:*","matchCriteriaId":"E3CFBB37-3186-43F8-B513-FBFFAA1B9DCF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-108","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34991","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:30.443","lastModified":"2026-06-17T06:04:14.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.0 through 8.4.2 and 8.3.0 through 8.3.2 and 8.2.2 allows attacker to execute unauthorized code or commands via a crafted http request."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando sql (\"inyección sql\") en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 y 8.4.0 a 8.4.2 y 8.3.0 a 8.3 .2 y 8.2.2 permiten a un atacante ejecutar código o comandos no autorizados a través de una solicitud http manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThanOrEqual":"8.4.2","versionType":"semver","status":"affected"},{"version":"8.3.0","lessThanOrEqual":"8.3.2","versionType":"semver","status":"affected"},{"version":"8.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-15T14:59:14.045632Z","id":"CVE-2023-34991","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A2DBECF3-69BD-4622-B0B3-1F0552CBB3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1A60E7E2-8A10-4C69-A86C-2D680C5E056A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F831179F-EC2D-4B8A-B433-CA395C1FEDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F036687E-4682-4773-9A28-33B9DB40C976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.4.0:*:*:*:*:*:*:*","matchCriteriaId":"22C854E0-5DD1-4EB6-8F84-243067C27AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"60787CAF-DF95-4691-A3C5-4A1A517DD146"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F9771B20-5C37-41ED-9DD9-19DCE1FD0F6B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-142","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36553","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:48.093","lastModified":"2026-06-17T06:06:31.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 and 5.0.0 through 5.0.1 and 4.10.0 and 4.9.0 and 4.7.2 allows attacker to execute unauthorized code or commands via crafted API requests."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiSIEM versión 5.4.0 y 5.3.0 a 5.3.3 y 5.2.5 a 5.2.8 y 5.2.1 a 5.2.2 y 5.1.0 a 5.1.3 y 5.0.0 a 5.0.1 y 4.10.0 y 4.9.0 y 4.7.2 permiten a un atacante ejecutar código o comandos no autorizados a través de solicitudes API manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"5.4.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.3","versionType":"semver","status":"affected"},{"version":"5.2.5","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.2.1","lessThanOrEqual":"5.2.2","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.3","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.1","versionType":"semver","status":"affected"},{"version":"4.10.0","status":"affected"},{"version":"4.9.0","status":"affected"},{"version":"4.7.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-15T14:59:18.794244Z","id":"CVE-2023-36553","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndIncluding":"5.1.3","matchCriteriaId":"D52F2E6B-9A88-4DB4-8CB9-09A3AFFF1685"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"A44DC3AB-BF8F-4818-A1B2-413C28E3247E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:4.9.0:*:*:*:*:*:*:*","matchCriteriaId":"9070EE8F-690A-4A25-A04F-25DB9AC2525A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:4.10.0:*:*:*:*:*:*:*","matchCriteriaId":"FFC6DCBF-8725-42AD-80A6-4D8BBA8B594A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"966F62A1-10E7-4AFF-8725-2A4425179CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9040EA7-86F7-4553-A0C8-A6C76B0C9E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE69B846-3B23-401D-98D0-46DC976A25FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DE4C2A49-23CB-4104-A345-46B3B4A29A24"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4B114C6F-82AF-4ADF-B840-61851B9E39C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"0C759185-C780-426F-8185-258C88A924A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B669A735-2DC0-434A-9CE1-0232F62848D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"4A5FA2FC-419D-46E8-ACE3-929E5B39F1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"DFA6A6A3-3847-4C0F-8415-7F036C86000D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"783AECE8-0875-4FDF-8885-E3665798CDEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"6E99CB1B-C3EA-4C7C-8484-9192BC95403A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C7EC060D-B4E4-46B7-BB4B-6DDEF8094C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91E43A1B-D4C5-4FFF-9D3E-00140023921E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-135","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36633","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:49.107","lastModified":"2026-06-17T06:06:42.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una vulnerabilidad de autorización inadecuada [CWE-285] en el correo web FortiMail versión 7.2.0 a 7.2.2 y anteriores a 7.0.5 permite a un atacante autenticado ver y modificar el título de las carpetas de la libreta de direcciones de otros usuarios a través de solicitudes HTTP o HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:10:02.842844Z","id":"CVE-2023-36633","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"1068FC83-F326-45AA-BB89-1A8C05A1E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"0A21C673-9ED8-4D8F-838F-F587CFC57715"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-203","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36641","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:49.833","lastModified":"2026-10-22T14:17:32.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy 7.2.0 through 7.2.4, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to denial of service via specifically crafted HTTP requests."},{"lang":"es","value":"Un error de truncamiento numérico en Fortinet FortiProxy versión 7.2.0 a 7.2.4, FortiProxy versión 7.0.0 a 7.0.10, FortiProxy 2.0 todas las versiones, FortiProxy 1.2 todas las versiones, FortiProxy 1.1, todas las versiones, FortiProxy 1.0 todas las versiones, FortiOS versión 7.4 .0, FortiOS versión 7.2.0 a 7.2.5, FortiOS versión 7.0.0 a 7.0.12, FortiOS 6.4 todas las versiones, FortiOS 6.2 todas las versiones, FortiOS 6.0 todas las versiones permiten al atacante denegar el servicio a través de solicitudes HTTP específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:21:33.734110Z","id":"CVE-2023-36641","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-197"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.13","matchCriteriaId":"10E4FB93-7111-4F2A-8D5A-F276261D0E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"7E1251FE-2B46-46AA-B474-506B0079810D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4D78C235-F7F5-4611-8467-0CC4F0F69111"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.17","matchCriteriaId":"0135464C-532C-430D-A76C-2FCDE4C991D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.14","matchCriteriaId":"A2B52E22-C64D-4142-885E-6C44FA670574"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"BA582D59-C740-4AE7-83CA-C09A1D0EDA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.5","matchCriteriaId":"A6E44123-995C-4E08-84B5-FF8C76B67B29"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-151","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41676","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:52.590","lastModified":"2026-06-17T06:22:35.933","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version  7.0.0 and before 6.7.5 may allow an attacker with access to windows agent logs to obtain the windows agent password via searching through the logs."},{"lang":"es","value":"Una exposición de información confidencial a un actor no autorizado [CWE-200] en FortiSIEM versión 7.0.0 y anteriores a 6.7.5 puede permitir que un atacante con acceso a los registros del agente de Windows obtenga la contraseña del agente de Windows mediante la búsqueda en los registros."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:13:11.174777Z","id":"CVE-2023-41676","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndIncluding":"6.7.5","matchCriteriaId":"20FD2D69-73DD-4EA4-ADE6-EB4BCFED7AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CAB28BA6-45B6-422B-9901-300B6024F703"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-290","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41840","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:53.240","lastModified":"2026-06-17T06:22:54.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path."},{"lang":"es","value":"Una vulnerabilidad de ruta de búsqueda no confiable en Fortinet FortiClientWindows 7.0.9 permite a un atacante realizar un ataque de DLL Hijack a través de una librería de motor OpenSSL malicioso en la ruta de búsqueda."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.9","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-11-16T13:58:40.386922Z","id":"CVE-2023-41840","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.9:*:*:*:*:windows:*:*","matchCriteriaId":"27DA480C-41A7-4F1C-8319-98468277590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:windows:*:*","matchCriteriaId":"CEC62C6E-AA05-4AE9-86C5-47D6763206AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.1:*:*:*:*:windows:*:*","matchCriteriaId":"E3CFBB37-3186-43F8-B513-FBFFAA1B9DCF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-274","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-42783","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:53.853","lastModified":"2026-06-17T06:24:29.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests."},{"lang":"es","value":"Path Traversal relativo en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 y 8.4.2 a 8.4.0 y 8.3.2 a 8.3.0 y 8.2.2 permite al atacante leer archivos arbitrarios a través de solicitudes http manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.6","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThanOrEqual":"8.4.2","versionType":"semver","status":"affected"},{"version":"8.3.0","lessThanOrEqual":"8.3.2","versionType":"semver","status":"affected"},{"version":"8.2.2","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiwlm","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.2.2","status":"affected"},{"version":"8.3.0","lessThanOrEqual":"8.3.2","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThanOrEqual":"8.4.2","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:22:55.290862Z","id":"CVE-2023-42783","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndIncluding":"8.5.4","matchCriteriaId":"929F1380-4410-466D-9203-62414DC7A39E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.6","matchCriteriaId":"B8B6EE47-5B58-45AB-BD38-8A112E72CF73"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A2DBECF3-69BD-4622-B0B3-1F0552CBB3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1A60E7E2-8A10-4C69-A86C-2D680C5E056A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F831179F-EC2D-4B8A-B433-CA395C1FEDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F036687E-4682-4773-9A28-33B9DB40C976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.4.0:*:*:*:*:*:*:*","matchCriteriaId":"22C854E0-5DD1-4EB6-8F84-243067C27AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"60787CAF-DF95-4691-A3C5-4A1A517DD146"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:8.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F9771B20-5C37-41ED-9DD9-19DCE1FD0F6B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-143","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44248","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:54.470","lastModified":"2026-06-17T06:27:12.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiEDRCollectorWindows versión 5.2.0.4549 y anteriores, 5.0.3.1007 y anteriores, 4.0 puede permitir que un atacante local impida que el servicio recopilador se inicie en el siguiente reinicio del sistema alterando algunas claves de registro del servicio."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiEDR CollectorWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiedrcollectorwindows:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiedrcollectorwindows:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiedrcollectorwindows:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:11:43.737058Z","id":"CVE-2023-44248","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:windows:*:*","versionStartIncluding":"5.0.3","versionEndIncluding":"5.0.3.1007","matchCriteriaId":"1A10D784-1ED4-46CC-AEB0-F006F8B0E16E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:windows:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.2.0.4549","matchCriteriaId":"2AF2B177-B287-4C8F-B1F4-42D3051D5EC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:windows:*:*","matchCriteriaId":"895977DC-C7C4-422F-BCAC-B2B46582A912"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-306","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-45582","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:55.017","lastModified":"2026-06-17T06:28:51.393","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0 through 7.2.4, 7.0.0 through 7.0.6 and before 6.4.8 may allow an unauthenticated attacker to  perform a brute force attack on the affected endpoints via repeated login attempts."},{"lang":"es","value":"Una vulnerabilidad de restricción inadecuada de intentos excesivos de autenticación [CWE-307] en el correo web FortiMail versión 7.2.0 a 7.2.4, 7.0.0 a 7.0.6 y anteriores a 6.4.8 puede permitir que un atacante no autenticado realice un ataque de fuerza bruta en los endpoints afectados mediante repetidos intentos de inicio de sesión."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:14:14.373874Z","id":"CVE-2023-45582","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"AEDC7EE8-084C-4F9E-A510-E283FCDF9832"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"CFF1A29D-46B8-4E8C-8D8B-39276CFED5BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"64646177-D83C-49A1-A93D-AB51ECE66605"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"1F74C5E7-FFA4-4C28-AEC5-161E7B3C2F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"D88B2A69-846E-4AFB-9E00-EBDC2A7015D5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-287","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-45585","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:55.617","lastModified":"2026-06-17T06:28:51.917","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 and below, version  6.6.3 and below, version 6.5.1 and below, version 6.4.2 and below, version 6.3.3 and below, version 6.2.1 and below, version 6.1.2 and below, version 5.4.0, version 5.3.3 and below may allow an authenticated user to view an encrypted ElasticSearch password via debug log files generated when FortiSIEM is configured with ElasticSearch Event Storage."},{"lang":"es","value":"Una inserción de información confidencial en la vulnerabilidad del archivo de registro [CWE-532] en FortiSIEM versión 7.0.0, versión 6.7.6 e inferior, versión 6.6.3 e inferior, versión 6.5.1 e inferior, versión 6.4.2 e inferior, versión 6.3.3 y anteriores, versión 6.2.1 y siguientes, versión 6.1.2 y siguientes, versión 5.4.0, versión 5.3.3 y siguientes pueden permitir que un usuario autenticado vea una contraseña cifrada de ElasticSearch a través de archivos de registro de depuración generados cuando FortiSIEM está configurado con ElasticSearch Event Storage."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.6","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:12:26.659008Z","id":"CVE-2023-45585","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.3","matchCriteriaId":"A0258A88-352D-4F9A-894D-F7442CAFE461"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndIncluding":"6.7.6","matchCriteriaId":"3E6F78C3-BFAB-446E-9E85-B2C38F35FED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91E43A1B-D4C5-4FFF-9D3E-00140023921E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F52E2B2-A3B1-493F-B092-77A2A44E855A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7B16CB79-AC63-41EA-AE9A-D6030449ACD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"912BA146-D840-4855-8C47-AC3D5E6D0C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"51452B16-AB83-41D3-8779-3E1AEA818AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3F453DE5-E31D-4BD1-8978-DD6D166045E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"2151BD68-91C5-44F5-8DB7-C04319FDFFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DC87151B-7E6D-45C6-8592-64F70E5BE459"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F7DCDFD3-CE9F-487B-87B6-9E673B7BAFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.3.3:*:*:*:*:*:*:*","matchCriteriaId":"EA88818A-DCA6-45EF-977D-ED7CA3693791"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C48AC74D-9FBE-4194-9BE8-FD2D6A0EC788"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BFFA27A5-0168-4261-9A04-D2DBB0A9946D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"2035DFA0-FF3A-4BBF-ABFE-0E310A7C668B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A391C353-BD26-4262-B86F-E3FBF8915DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EDD5BE55-0990-4646-ADA7-9A30981D4DF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F46426B1-B144-432C-8BA6-317617EBC110"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*","matchCriteriaId":"6590962C-FF61-4237-8F30-33B15829C8B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*","matchCriteriaId":"32B5BFCB-DFD4-4519-A2AF-1FABA58FA04D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"50635727-53A0-476F-BB86-A47CDAA3D45B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CAB28BA6-45B6-422B-9901-300B6024F703"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-392","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-40681","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T19:15:12.803","lastModified":"2026-06-17T05:01:49.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to cause denial of service via sending a crafted request to a specific named pipe."},{"lang":"es","value":"Una autorización incorrecta en Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 y 6.0.0 - 6.0.10 permite a un atacante provocar denegación de servicio mediante envío una solicitud manipulada para una canalización con nombre específico."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:06:35.386828Z","id":"CVE-2022-40681","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.10","matchCriteriaId":"99B02B5E-89EF-46E5-8EC4-98AC8FB5CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"C819FC90-3D14-44CD-B535-CC27E1FC72BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"56EA45F2-D487-4403-8A22-9DB65CFFC39A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-299","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-25603","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T19:15:19.570","lastModified":"2026-06-17T05:41:35.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an unauthorized attacker to carry out privileged actions and retrieve sensitive information via crafted web requests."},{"lang":"es","value":"Una política permisiva entre dominios con vulnerabilidad de dominios que no son de confianza en Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 y 6.4.0 - 6.4.1 permite a un atacante no autorizado realizar acciones privilegiadas y recuperar información confidencial a través de solicitudes web manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDDoS-F","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:07:09.416663Z","id":"CVE-2023-25603","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-942"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B35D8D53-448B-474C-B7CB-324CB4ED7A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"933701AE-43E3-4260-973B-4EA09C375965"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.4","matchCriteriaId":"D373DFA1-A7F4-4E5F-9F52-62C903E60EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A9C4E7CA-746B-4542-9E83-AC75C3DAB1FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A3BE2AD7-5D1D-4184-AE2E-80DF59E968C4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-518","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-29177","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T19:15:24.337","lastModified":"2026-06-17T05:49:32.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests."},{"lang":"es","value":"Las vulnerabilidades de copia de búfer múltiple sin verificar el tamaño de entrada ('desbordamiento del búfer clásico') [CWE-120] en FortiADC versión 7.2.0 y anteriores a 7.1.2 y FortiDDoS-F versión 6.5.0 y anteriores a 6.4.1 permiten a un atacante privilegiado ejecutar código o comandos arbitrarios a través de solicitudes CLI específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDDoS-F","defaultStatus":"unaffected","versions":[{"version":"6.5.0","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.4","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.3","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:09:09.481596Z","id":"CVE-2023-29177","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndIncluding":"7.1.2","matchCriteriaId":"8EE864BE-0405-485C-997E-072092F6BB5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:5.2.0:-:*:*:*:*:*:*","matchCriteriaId":"20EC4BBC-C056-4B63-8D08-F1F6F77CED5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:5.3.0:-:*:*:*:*:*:*","matchCriteriaId":"F67FE569-A1C6-4592-B650-444C94C45A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:5.4.0:-:*:*:*:*:*:*","matchCriteriaId":"A3B866E2-9E6A-4F82-ABBC-800F87152FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:6.0.0:-:*:*:*:*:*:*","matchCriteriaId":"C61C6239-ACC1-4A3B-ABC4-B2C501148927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:6.1.0:-:*:*:*:*:*:*","matchCriteriaId":"43DED0DD-E584-4ECF-8B0F-2FB8B3167889"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:6.2.0:-:*:*:*:*:*:*","matchCriteriaId":"63B95B99-89C8-4797-8FDA-2887596ADFED"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.0.0:-:*:*:*:*:*:*","matchCriteriaId":"70AE3711-D7D8-49A3-981D-CD96F2497CB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"74B0A112-AA30-4D11-8F36-3DC8A2EBCA16"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.4","matchCriteriaId":"C7B816ED-6776-46CF-9F8C-B0A2CF3716F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.1","matchCriteriaId":"847C6FC1-DBCF-4803-BDDB-6E2C5B079ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:6.2.0:-:*:*:*:*:*:*","matchCriteriaId":"4DD47EAD-BE0A-4E66-BAE6-BFECD8FBCC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:6.3.0:-:*:*:*:*:*:*","matchCriteriaId":"A702B46E-1BA1-4D57-BBC5-96B66DB83FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0DB1731B-7799-408B-8F8C-F5ABFEA7A180"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-064","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-40719","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T19:15:30.890","lastModified":"2026-06-17T06:19:13.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials."},{"lang":"es","value":"Un uso de vulnerabilidad de credenciales codificadas en Fortinet FortiAnalyzer y FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 y 7.4.0 permite a un atacante acceder a datos de pruebas privados de Fortinet mediante el uso de credenciales estáticas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.5,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-30T18:07:40.374088Z","id":"CVE-2023-40719","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"CF3FC97A-9881-4D36-B188-F11199A75114"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"B31BB84A-E622-4911-AAB4-41E57F661A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9AF01-72FD-4942-A95E-71A7609B6977"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"7A615E88-FCB3-48F4-A6F3-5EDA0F67FE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"7C7C73B7-2AE1-4FC2-A37A-89A085796D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-177","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-27488","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T07:15:10.910","lastModified":"2026-06-17T04:37:06.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x, FortiNDR version 1.x.x allows a remote unauthenticated attacker to execute commands on the CLI via tricking an authenticated administrator to execute malicious GET requests."},{"lang":"es","value":"Cross-Site Request Forgery (CSRF) en Fortinet FortiVoiceEnterprise versión 6.4.x, 6.0.x, FortiSwitch versión 7.0.0 a 7.0.4, 6.4.0 a 6.4.10, 6.2.0 a 6.2.7, 6.0.x , FortiMail versión 7.0.0 a 7.0.3, 6.4.0 a 6.4.6, 6.2.x, 6.0.x FortiRecorder versión 6.4.0 a 6.4.2, 6.0.x, 2.7.x, 2.6.x, FortiNDR versión 1.xx permite que un atacante remoto no autenticado ejecute comandos en la CLI engañando a un administrador autenticado para que ejecute solicitudes GET maliciosas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.11","versionType":"semver","status":"affected"},{"version":"2.7.0","lessThanOrEqual":"2.7.7","versionType":"semver","status":"affected"},{"version":"2.6.0","lessThanOrEqual":"2.6.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitch","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.8","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","versions":[{"version":"7.1.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.3","versionType":"semver","status":"affected"},{"version":"1.4.0","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.6","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiai:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"19BD18D1-18D4-4D01-BF20-63458D0B20DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiai:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"649E0260-0770-4D6A-A679-8862D7039A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"01F784BF-4F89-4938-9150-F911E3EB6CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"AEDC7EE8-084C-4F9E-A510-E283FCDF9832"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.6","matchCriteriaId":"C0A5C345-7055-4F18-AE77-FF1DBE41AB89"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"3680FCC2-6397-4726-AA94-902C3831EDD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.4","matchCriteriaId":"7E091862-662E-40F0-9D53-6F9B898115BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"888692FD-3219-49D3-898C-F4EA84CCC6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndIncluding":"2.6.3","matchCriteriaId":"78EA72E6-DBA2-4E76-AF17-7AC63D542241"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7.0","versionEndIncluding":"2.7.7","matchCriteriaId":"4A18D3F0-FED4-49D1-BD14-C57875D48190"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"BAED4521-DF4F-4CCA-82CE-9FAC7BC95391"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"C8252967-27EB-4596-A1BF-673DE66B77BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.11","matchCriteriaId":"D3AE050D-F16C-4FA4-B1F3-54708C8BDC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.7","matchCriteriaId":"FCD41EBB-A032-40F1-85F9-E2640DD7F448"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.7","matchCriteriaId":"843F4434-651D-4A22-80C3-77397E059A98"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.7","matchCriteriaId":"549EE910-DAC4-45B7-AE45-6B6A786CD2F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.10","matchCriteriaId":"4EAE583E-5D26-4224-AB58-DC3E4A6EA505"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.4","matchCriteriaId":"2681D458-EE55-478D-92D1-C6BB7BB3BAC4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-038","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36639","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T07:15:12.900","lastModified":"2026-06-17T06:06:43.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPAM versions 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands  via specially crafted API requests."},{"lang":"es","value":"Un uso de cadena de formato controlada externamente en Fortinet FortiProxy versiones 7.2.0 a 7.2.4, 7.0.0 a 7.0.10, versiones de FortiOS 7.4.0, 7.2.0 a 7.2.4, 7.0.0 a 7.0.11, 6.4.0 a 6.4.12, 6.2.0 a 6.2.15, 6.0.0 a 6.0.17, las versiones de FortiPAM 1.0.0 a 1.0.3 permiten al atacante ejecutar código o comandos no autorizados a través de solicitudes API especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.17","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","versions":[{"version":"1.1.0","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"7E1251FE-2B46-46AA-B474-506B0079810D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4D78C235-F7F5-4611-8467-0CC4F0F69111"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.17","matchCriteriaId":"0135464C-532C-430D-A76C-2FCDE4C991D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.12","matchCriteriaId":"5E99B6E5-7EC3-406C-AFAC-A5E32DE266DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.11","matchCriteriaId":"C2573C90-BE6A-4D5D-A223-F09213318909"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4AB643A8-B52F-4D54-B816-28A6401BAA25"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.3","matchCriteriaId":"3BA2C6ED-2765-4B56-9B37-10C50BD32C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0CC27DCF-F74C-431C-9545-F405D369AF22"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-138","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-40716","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T07:15:14.223","lastModified":"2026-06-17T06:19:13.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command vulnerability [CWE-78]  in the command line interpreter of FortiTester 2.3.0 through 7.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments when running execute restore/backup ."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo [CWE-78] en el intérprete de línea de comando de FortiTester 2.3.0 a 7.2.3 puede permitir que un atacante autenticado ejecute comandos no autorizados a través de argumentos específicamente manipulados al ejecutar ejecutar restauración/copia de seguridad."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiTester","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.1","versionType":"semver","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.1","versionType":"semver","status":"affected"},{"version":"4.0.0","status":"affected"},{"version":"3.9.0","lessThanOrEqual":"3.9.2","versionType":"semver","status":"affected"},{"version":"3.8.0","status":"affected"},{"version":"3.7.0","lessThanOrEqual":"3.7.1","versionType":"semver","status":"affected"},{"version":"3.6.0","status":"affected"},{"version":"3.5.0","lessThanOrEqual":"3.5.1","versionType":"semver","status":"affected"},{"version":"3.4.0","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.1","versionType":"semver","status":"affected"},{"version":"3.2.0","status":"affected"},{"version":"3.1.0","status":"affected"},{"version":"3.0.0","status":"affected"},{"version":"2.9.0","status":"affected"},{"version":"2.8.0","status":"affected"},{"version":"2.7.0","status":"affected"},{"version":"2.6.0","status":"affected"},{"version":"2.5.0","status":"affected"},{"version":"2.4.0","lessThanOrEqual":"2.4.1","versionType":"semver","status":"affected"},{"version":"2.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"20DC6A76-A91E-49D8-AD5F-5A53E6FD56A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"835CFB56-B366-44F2-BC0D-797973E29341"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"05D6DD1E-24F5-49C4-9BAF-2E4FA682F41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F1A59274-C7AE-456B-821A-4A41DAE51DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BF739FA1-C8A1-4CCD-BCA4-1A9ABD31D926"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"71DF1A6A-B574-48E7-9337-A986EAD45441"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5B23B49A-6BEF-4662-A19A-AA53B6A61913"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"F632D17B-0864-4965-92CD-7B58CB88506C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"98433F67-056E-4371-B482-93A2EBF0C237"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D8609203-C2ED-4821-A836-E81479406B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3A0E475B-5CDF-40DB-A923-5DEB093D246E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E7C93812-ED30-40EC-81C2-159D2095A8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"61C7F802-1490-467A-B5B6-0B2AFD468439"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"75CB9729-BCDE-41F4-8684-01FF62794E13"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1ED9A5FF-B3A5-4DA8-AF7E-7B6C107A6C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A8CCDEF0-9026-4F67-95B1-07286EFBB370"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"1FC82DC7-5C3C-452A-BB1D-021D935851EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"49A75B9A-D1A1-4E6A-84C7-1701DE00C8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D2934396-D757-4079-A5D7-65133CF833DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"83A5237C-C126-4AEA-8CE8-DEC82DDEC69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.9.0:*:*:*:*:*:*:*","matchCriteriaId":"14C2E2DA-6CE2-4B5E-A6CB-029967EAAFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"492036BF-130B-435B-9EDD-71732CD663A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:3.9.2:*:*:*:*:*:*:*","matchCriteriaId":"8AB540E8-5B68-4F20-970E-63B70FFA3C83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"23A3ABD7-9694-4784-9CD4-E8A1FA715682"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E79982C9-CB89-41B9-A294-B9830897304A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7BB327AD-00E1-4397-B992-E182785E8ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E47F051E-5D15-456D-9C0D-1AE6FF347155"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D32E37C0-6ABE-46D2-987B-EC5E7F6BEF75"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"90D54E79-62C6-427F-9DD1-B3A99944E418"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"48797E89-FD8C-4904-9A8B-55F8D3840DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6BAFDB60-1FC7-42E7-854A-9FB24E652DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"786A513F-DAB0-4A19-91CA-8B30A8A507A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5108EA9C-45A6-44A6-8A04-E46988AB31DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2EDD4D17-2884-446E-8857-BF059264997F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3820B2FC-A566-44C1-9F98-B282A960359E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-345","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41673","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T07:15:15.860","lastModified":"2026-06-17T06:22:35.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad de autorización inadecuada [CWE-285] en Fortinet FortiADC versión 7.4.0 y anteriores a 7.2.2 puede permitir que un usuario con pocos privilegios lea o haga una copia de seguridad de la configuración completa del sistema a través de solicitudes HTTP o HTTPS."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"F5275C5C-B6FD-4456-B143-ECDD282150C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"302D8FF0-69B6-451A-9B5B-E28B2FAA30D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B35D8D53-448B-474C-B7CB-324CB4ED7A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"933701AE-43E3-4260-973B-4EA09C375965"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7F3029D7-4C37-4468-9CCD-45C7259EFF2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"74B0A112-AA30-4D11-8F36-3DC8A2EBCA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C624CB5-F745-4781-839A-B397EC97590B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-270","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41678","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T07:15:17.317","lastModified":"2026-06-17T06:22:36.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically crafted request."},{"lang":"es","value":"Un doble gratuito en las versiones Fortinet FortiOS 7.0.0 a 7.0.5, FortiPAM versión 1.0.0 a 1.0.3, 1.1.0 a 1.1.1 permite a un atacante ejecutar código o comandos no autorizados a través de una solicitud específicamente manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","versions":[{"version":"1.1.0","lessThanOrEqual":"1.1.1","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-12-14T05:00:10.853716Z","id":"CVE-2023-41678","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"79FEE7F6-F72E-4A43-883C-0CF492DF355B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FBDFDF02-2136-4DE0-A19B-FE3654ED90A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"49D51C9F-CED3-4EA0-89EB-3A63F54B10E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A9341F0B-D2F3-41D6-8FA5-49FDE8F3048B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0E0B17DD-6CE0-4DD0-9850-640F24A1AB10"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"48D0E8CC-3815-4697-86D0-DC7F66E70520"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"920985C7-18F9-414A-A0B2-8C2FACDDE708"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4DA50317-AD1F-451A-AB91-96F1791CBBF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BD6728D1-6891-4144-9D5B-EC7C9EE3B044"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7FFE431F-113D-4DF8-8166-10B8F8EB096C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0CC27DCF-F74C-431C-9545-F405D369AF22"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"46FB5EB9-00E7-444C-B433-B51460BED34C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-196","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41844","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T07:15:18.887","lastModified":"2026-06-17T06:22:55.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0.4 and above allows attacker to execute unauthorized code or commands via crafted HTTP requests in capture traffic endpoint."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de la página web (\"cross-site scripting\") en Fortinet FortiSandbox versión 4.4.1 y 4.4.0 y 4.2.0 a 4.2.5 y 4.0.0 a 4.0.3 y 3.2.0 a 3.2 .4 y 3.1.0 a 3.1.5 y 3.0.0 a 3.0.4 permiten a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP manipuladas en el endpoint de captura de tráfico."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.2","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.4","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","baseScore":3.5,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-08T14:28:56.098004Z","id":"CVE-2023-41844","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.7","matchCriteriaId":"7D1EE4D7-4087-4A4A-9171-F48B1C5915C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.5","matchCriteriaId":"2C47A3DB-A02A-488D-B0E1-867A19CE43B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.4","matchCriteriaId":"16BB4915-1330-45E5-887E-AD97C29F500B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.4","matchCriteriaId":"5197A546-B82E-4407-9CC4-8DF4C4323605"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.5","matchCriteriaId":"4641E869-8B7B-4DD7-89A9-1EA0BCE51C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0CD764B6-2235-4C06-8A0C-AF5889B027F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3908E337-E2C4-4663-BC98-C33E68DCC132"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A1AF171E-7916-468A-B26E-7C722A0E6D8E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-214","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-45587","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T07:15:20.363","lastModified":"2026-06-17T06:28:52.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions allows attacker to execute unauthorized code or commands via crafted HTTP requests"},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de la página web (\"cross-site scripting\") en Fortinet FortiSandbox versión 4.4.1 y 4.4.0 y 4.2.0 a 4.2.5 y 4.0.0 a 4.0.3 y 3.2.0 a 3.2 .4 y 3.1.0 a 3.1.5 permiten al atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP manipuladas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.2","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","baseScore":3.5,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-28T13:14:37.147663Z","id":"CVE-2023-45587","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.5","matchCriteriaId":"2C47A3DB-A02A-488D-B0E1-867A19CE43B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.2.4","matchCriteriaId":"16BB4915-1330-45E5-887E-AD97C29F500B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.4","matchCriteriaId":"5197A546-B82E-4407-9CC4-8DF4C4323605"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.5","matchCriteriaId":"4641E869-8B7B-4DD7-89A9-1EA0BCE51C35"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"0CD764B6-2235-4C06-8A0C-AF5889B027F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3908E337-E2C4-4663-BC98-C33E68DCC132"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A1AF171E-7916-468A-B26E-7C722A0E6D8E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-360","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-46713","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T07:15:24.547","lastModified":"2026-06-17T06:31:24.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7.2.5 and 7.4.0 may allow an attacker to forge traffic logs via a crafted URL of the web application."},{"lang":"es","value":"Una neutralización de salida inadecuada para los registros en Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7.2.5 y 7.4.0 puede permitir que un atacante falsifique registros de tráfico a través de una URL manipulada de la aplicación web."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.23","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-117"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.8","matchCriteriaId":"B780406C-A6CC-40A8-BB80-2BFBC0E39F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.23","matchCriteriaId":"29BAA789-62A7-4040-B6F7-8E70FFBA0399"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"BE91BE98-9518-48C1-8063-5F6A8AE50A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.5","matchCriteriaId":"7700D448-6A28-4033-9383-B42FA04DCBFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5E0DF8E-3272-4302-A1A0-F7981E383E47"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-256","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-48782","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T07:15:27.480","lastModified":"2026-06-17T06:34:57.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters"},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWLM versión 8.6.0 a 8.6.5 permite al atacante ejecutar código o comandos no autorizados a través de parámetros de solicitud http get específicamente manipulados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-12-14T05:00:12.301524Z","id":"CVE-2023-48782","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndIncluding":"8.6.5","matchCriteriaId":"BCEDF5B8-C922-48DD-926D-788A53ACD684"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-450","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-48791","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T07:15:28.980","lastModified":"2026-06-17T06:34:58.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiPortal version 7.2.0, version 7.0.6 and below may allow a remote authenticated attacker with at least R/W permission to execute unauthorized commands via specifically crafted arguments in the Schedule System Backup page field."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando ('Inyección de comando') [CWE-77] en FortiPortal versión 7.2.0, versión 7.0.6 y anteriores puede permitir que un atacante remoto autenticado con al menos permiso R/W ejecute comandos no autorizados a través de argumentos específicamente manipulados en el campo de la página Programar Copia de Seguridad del Sistema."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-02T14:29:28.318974Z","id":"CVE-2023-48791","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"A94FF899-FAEF-4005-9B23-1F44A949AEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2C7F7D4E-DE62-491A-9C00-EAD2595BF2D7"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-425","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-47536","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T08:15:50.920","lastModified":"2026-06-17T06:32:51.590","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below may allow a remote unauthenticated attacker to bypass the firewall deny geolocalisation policy via timing the bypass with a GeoIP database update."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiOS versión 7.2.0, versión 7.0.13 e inferior, versión 6.4.14 e inferior y FortiProxy versión 7.2.3 e inferior, versión 7.0.9 e inferior, versión 2.0.12 y a continuación pueden permitir que un atacante remoto no autenticado evite la política de geolocalización de denegación del firewall sincronizando la omisión con una actualización de la base de datos GeoIP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":3.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-12-14T16:02:03.491043Z","id":"CVE-2023-47536","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.12","matchCriteriaId":"7C1D5E6B-A23E-4A92-B53C-720AFEB1B951"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"DAC18F7E-5242-4F36-BB42-FEC33B3AC075"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"3A99FF48-370E-4D2A-B5CC-889EA21AB213"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.14","matchCriteriaId":"A2B52E22-C64D-4142-885E-6C44FA670574"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.13","matchCriteriaId":"DF27CA2F-3F4C-4CCB-B832-0E792673C429"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-432","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44251","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T09:15:34.280","lastModified":"2026-06-17T06:27:13.260","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1. through 5.1.2 may allow an authenticated attacker to read and delete arbitrary file of the system via crafted HTTP or HTTPs requests."},{"lang":"es","value":"** NO COMPATIBLE CUANDO SE ASIGNA ** Una limitación inadecuada de un nombre de ruta a una vulnerabilidad de directorio restringido (\"path traversal\") [CWE-22] en Fortinet FortiWAN versión 5.2.0 a 5.2.1 y versión 5.1.1. hasta 5.1.2 puede permitir que un atacante autenticado lea y elimine archivos arbitrarios del sistema a través de solicitudes HTTP o HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWAN","defaultStatus":"unaffected","versions":[{"version":"5.2.0","lessThanOrEqual":"5.2.1","versionType":"semver","status":"affected"},{"version":"5.1.1","lessThanOrEqual":"5.1.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C010221E-9BAF-41DC-B352-5941D38C8FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A7944DB8-76F2-40B9-97E2-D14A1EBF6286"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BCE7940-6D64-43BE-92AF-3EB86F4D0B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1C8034DF-A33B-4B49-9448-6AD1DFAB27D5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-265","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44252","sourceIdentifier":"psirt@fortinet.com","published":"2023-12-13T09:15:34.473","lastModified":"2026-06-17T06:27:13.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values."},{"lang":"es","value":"** NO COMPATIBLE CUANDO ESTÁ ASIGNADO ** Una vulnerabilidad de autenticación incorrecta [CWE-287] en Fortinet FortiWAN versión 5.2.0 a 5.2.1 y versión 5.1.1 a 5.1.2 puede permitir que un atacante autenticado escale sus privilegios a través de solicitudes HTTP o HTTPs con valores de token JWT manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWAN","defaultStatus":"unaffected","versions":[{"version":"5.2.0","lessThanOrEqual":"5.2.1","versionType":"semver","status":"affected"},{"version":"5.1.1","lessThanOrEqual":"5.1.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C010221E-9BAF-41DC-B352-5941D38C8FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A7944DB8-76F2-40B9-97E2-D14A1EBF6286"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BCE7940-6D64-43BE-92AF-3EB86F4D0B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1C8034DF-A33B-4B49-9448-6AD1DFAB27D5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-061","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-37932","sourceIdentifier":"psirt@fortinet.com","published":"2024-01-10T18:15:45.570","lastModified":"2026-06-17T06:08:55.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise version 7.0.0 and before 6.4.7 allows an authenticated attacker to read arbitrary files from the system via sending crafted HTTP or HTTPS requests"},{"lang":"es","value":"Una vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido (\"Path traversal\") [CWE-22] en FortiVoiceEntreprise versión 7.0.0 y anteriores a 6.4.7 permite a un atacante autenticado leer archivos arbitrarios del sistema mediante el envío de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-11T19:36:08.840870Z","id":"CVE-2023-37932","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"C0B44874-E530-40B9-92F5-03667CFB9F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.8","matchCriteriaId":"A9743AEC-093F-47A0-BA8A-7E76308D0152"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BB44AB41-E006-489F-9C49-2DFA73EF01B2"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-219","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-37934","sourceIdentifier":"psirt@fortinet.com","published":"2024-01-10T18:15:45.823","lastModified":"2026-06-17T06:08:56.347","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an authenticated attacker to perform a denial of service attack via sending crafted HTTP or HTTPS requests in a high frequency."},{"lang":"es","value":"Una vulnerabilidad de asignación de recursos sin límites o de limitación [CWE-770] en FortiPAM 1.0 en todas las versiones permite a un atacante autenticado realizar un ataque de denegación de servicio mediante el envío de solicitudes HTTP o HTTPS manipuladas con alta frecuencia."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","versions":[{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-10T19:08:34.113124Z","id":"CVE-2023-37934","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.1.0","matchCriteriaId":"5296F4A1-F228-451A-9B42-A418B7DCFFBA"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-226","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44250","sourceIdentifier":"psirt@fortinet.com","published":"2024-01-10T18:15:46.030","lastModified":"2026-06-17T06:27:13.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a FortiProxy HA cluster version 7.4.0 through 7.4.1 allows an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad de administración de privilegios inadecuada [CWE-269] en un clúster Fortinet FortiOS HA versión 7.4.0 a 7.4.1 y 7.2.5 y en un clúster FortiProxy HA versión 7.4.0 a 7.4.1 permite que un atacante autenticado realice acciones elevadas a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.5","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-14T17:24:51.505933Z","id":"CVE-2023-44250","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9010968B-B839-4B7C-BFB5-6BD9CBCEC166"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1491795D-14BA-4D82-9CB0-6FA7D35EB64E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","matchCriteriaId":"06FF7838-98E3-4022-95D3-D7B540D98D73"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"17FE168A-0EA4-467C-91D2-87EB6D83917A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-315","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-46712","sourceIdentifier":"psirt@fortinet.com","published":"2024-01-10T18:15:46.223","lastModified":"2026-06-17T06:31:23.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 through 7.2.1 allows attacker to escalate its privilege via specifically crafted HTTP requests."},{"lang":"es","value":"Un control de acceso inadecuado en Fortinet FortiPortal versión 7.0.0 a 7.0.6, Fortinet FortiPortal versión 7.2.0 a 7.2.1 permite al atacante escalar su privilegio a través de solicitudes HTTP específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-08T15:47:43.383575Z","id":"CVE-2023-46712","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"A94FF899-FAEF-4005-9B23-1F44A949AEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.1","matchCriteriaId":"EFB80359-3F7B-41FC-87EC-3EAF9A46642A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-395","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-48783","sourceIdentifier":"psirt@fortinet.com","published":"2024-01-10T18:15:46.807","lastModified":"2026-06-17T06:34:57.710","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and below, version 7.0.6 and below, version 6.0.14 and below, version 5.3.8 and below may allow a remote authenticated user with at least read-only permissions to access to other organization endpoints via crafted GET requests."},{"lang":"es","value":"Una vulnerabilidad de omisión de autorización a través de clave controlada por el usuario [CWE-639] que afecta a PortiPortal versión 7.2.1 e inferior, versión 7.0.6 e inferior, versión 6.0.14 e inferior, versión 5.3.8 e inferior puede permitir que un usuario autenticado remotamente con al menos permisos de solo lectura para acceder a otros endpoints de la organización a través de solicitudes GET manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.14","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-10T19:04:25.537162Z","id":"CVE-2023-48783","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.8","matchCriteriaId":"44C143C2-D850-4768-94D0-55615D670A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.14","matchCriteriaId":"EBA19A35-E732-4B07-BE90-4B93B914D857"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"281311DE-FCED-4AB9-8D54-EBD0C8FE53B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"CF4332EA-0FED-44AB-A395-E3D62B365012"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-408","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23108","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-05T14:15:57.827","lastModified":"2026-06-17T07:12:02.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet  allows attacker to execute unauthorized code or commands via via crafted API requests."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiSIEM versión 7.1.0 a 7.1.1 y 7.0.0 a 7.0.2 y 6.7.0 a 6.7.8 y 6.6.0 a través 6.6.3 y 6.5.0 a 6.5.2 y 6.4.0 a 6.4.2 permiten al atacante ejecutar código o comandos no autorizados a través de solicitudes API manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.8","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":10.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-24T15:54:24.346642Z","id":"CVE-2024-23108","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"23FA8F49-E85A-402F-91CF-293EF5C60B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0","versionEndIncluding":"6.5.2","matchCriteriaId":"CE42081E-AF1E-4FEB-9570-324A7FB8A9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.0","versionEndIncluding":"6.6.3","matchCriteriaId":"EB301503-0ECB-4D21-B341-ACF0F302CF85"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndIncluding":"6.7.8","matchCriteriaId":"71C5093F-7D96-46B5-8DF7-068877E71F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"AFE7DE50-FC7B-4F64-8324-F6BF302B4667"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C9E32B0-8C95-40D7-B31F-54626D1F7AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0016873D-3247-4B9A-9519-46C88EEBB3BF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-130","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/horizon3ai/CVE-2024-23108","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2024-23109","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-05T14:15:59.100","lastModified":"2026-06-17T07:12:02.933","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet  allows attacker to execute unauthorized code or commands via via crafted API requests."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiSIEM versión 7.1.0 a 7.1.1 y 7.0.0 a 7.0.2 y 6.7.0 a 6.7.8 y 6.6.0 a través 6.6.3 y 6.5.0 a 6.5.2 y 6.4.0 a 6.4.2 permiten al atacante ejecutar código o comandos no autorizados a través de solicitudes API manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.1","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.8","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortisiem","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.1","status":"affected"}]},{"vendor":"fortinet","product":"fortisiem","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortisiem","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.7.0","lessThanOrEqual":"6.7.8","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortisiem","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortisiem","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.5.0","lessThanOrEqual":"6.5.2","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":10.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-10-16T00:00:00+00:00","id":"CVE-2024-23109","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"23FA8F49-E85A-402F-91CF-293EF5C60B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0","versionEndIncluding":"6.5.2","matchCriteriaId":"CE42081E-AF1E-4FEB-9570-324A7FB8A9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.0","versionEndIncluding":"6.6.3","matchCriteriaId":"EB301503-0ECB-4D21-B341-ACF0F302CF85"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndIncluding":"6.7.8","matchCriteriaId":"71C5093F-7D96-46B5-8DF7-068877E71F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"AFE7DE50-FC7B-4F64-8324-F6BF302B4667"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C9E32B0-8C95-40D7-B31F-54626D1F7AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0016873D-3247-4B9A-9519-46C88EEBB3BF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-130","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-21762","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-09T09:15:08.087","lastModified":"2026-10-22T19:20:41.990","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests"},{"lang":"es","value":"Una escritura fuera de los límites en Fortinet FortiOS versiones 7.4.0 a 7.4.2, 7.2.0 a 7.2.6, 7.0.0 a 7.0.13, 6.4.0 a 6.4.14, 6.2.0 a 6.2.15 , 6.0.0 a 6.0.17, y versiones de FortiProxy 7.4.0 a 7.4.2, 7.2.0 a 7.2.8, 7.0.0 a 7.0.14, 2.0.0 a 2.0.13, 1.2.0 a 1.2.13 , 1.1.0 a 1.1.6, 1.0.0 a 1.0.7. Permite al atacante ejecutar código o comandos no autorizados a través de solicitudes específicamente manipuladas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.13","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","lessThan":"2.0.14","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThan":"7.0.15","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThan":"7.2.9","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.3","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThan":"6.2.16","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThan":"6.4.15","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThan":"7.0.14","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThan":"7.2.7","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-08T00:00:00+00:00","id":"CVE-2024-21762","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2024-02-09","cisaActionDue":"2024-02-16","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiOS Out-of-Bound Write Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"2.0.14","matchCriteriaId":"614BFD88-3C7A-4F6F-BD26-F53E4BC464D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.15","matchCriteriaId":"72ED8947-DBF3-483B-B267-117403A3D8E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"DF62C95E-AB35-4A8E-84F8-5197E9D33C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"4A077234-F19C-4E87-A7A5-A266B5C903C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.18","matchCriteriaId":"AE33B892-8CBB-4E16-B529-A1A0C48CE664"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.16","matchCriteriaId":"3DF10835-8DE2-415B-9EE8-99FFD699193E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"4E29353F-8791-4117-BA7A-E32FAB8348A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"C119229A-3805-47C1-B3F9-AF1A4007A63B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"553C4BA9-953B-4017-8498-785BDA7A3006"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"757A5257-6103-4DC5-B79F-727E4279614A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-015","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-24-015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21762","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2023-26206","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-15T14:15:44.597","lastModified":"2026-06-17T05:42:49.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7.2.0 allows an attacker to execute unauthorized code or commands via the name fields observed in the policy audit logs."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de la página web ('cross-site scripting') en Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 y 7.2.0 permite a un atacante para ejecutar código o comandos no autorizados a través de los campos de nombre observados en los registros de auditoría de políticas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.2","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.8","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.10","versionType":"semver","status":"affected"},{"version":"7.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-05T19:50:54.521966Z","id":"CVE-2023-26206","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.10","matchCriteriaId":"72F09A9E-3804-43BE-95B8-67418FEF269E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.8","matchCriteriaId":"225F8F74-D68C-444E-87E9-BC8AED05BB42"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndIncluding":"9.4.2","matchCriteriaId":"029D7D58-6515-42D5-8E9A-73845CCE15A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"EFF5B4CF-5BF9-4852-BD4F-5A27FD17EDC2"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-063","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44253","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-15T14:15:44.830","lastModified":"2026-06-17T06:27:13.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate other adoms and device names via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una exposición de información confidencial a una vulnerabilidad de actor no autorizado [CWE-200] en Fortinet FortiManager versión 7.4.0 a 7.4.1 y anteriores a 7.2.5, FortiAnalyzer versión 7.4.0 a 7.4.1 y anteriores a 7.2.5 y FortiAnalyzer-BigData Las versiones anteriores a 7.2.5 permiten a un administrador de adom enumerar otros adoms y nombres de dispositivos a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-23T20:42:16.354603Z","id":"CVE-2023-44253","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"285EC81A-34F0-4153-82DE-6A49C05EB240"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.14","matchCriteriaId":"6AC08BD1-2008-4B3B-8594-A28F8DB9DC8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.11","matchCriteriaId":"FF3BCBBD-C706-4B2E-A01B-C1205EE28155"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"B31BB84A-E622-4911-AAB4-41E57F661A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9AF01-72FD-4942-A95E-71A7609B6977"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"838EB502-C11B-4ED6-9CF2-D067048F3A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"09105C5B-378F-4E1A-B395-F43573983A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.14","matchCriteriaId":"7E862237-362D-400A-A81E-305CDBD1077A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.11","matchCriteriaId":"13D172A0-5DB2-4A3E-A984-BB57D39AEE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"7C7C73B7-2AE1-4FC2-A37A-89A085796D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BF7F0AC2-9F06-4961-9671-B44B5B8EB701"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-268","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-25j8-69h7-83h2","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/psirt/FG-IR-23-268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-25j8-69h7-83h2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2023-45581","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-15T14:15:45.033","lastModified":"2026-10-22T14:17:33.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0 through 7.0.4, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad de administración de privilegios inadecuada [CWE-269] en Fortinet FortiClientEMS versión 7.2.0 a 7.2.2 y anteriores a 7.0.10 permite a un administrador del sitio con privilegios de superadministrador realizar operaciones administrativas globales que afectan a otros sitios a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.02.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.02.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.02.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.6","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"06.02.00","lessThanOrEqual":"06.02.02","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlient_enterprise_management_server","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:forticlient_enterprise_management_server:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlient_enterprise_management_server:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThan":"6.3","versionType":"custom","status":"affected"},{"version":"6.4.0","lessThan":"6.5","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"custom","status":"affected"},{"version":"7.0.6","lessThanOrEqual":"7.0.10","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T17:06:14.506422Z","id":"CVE-2023-45581","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.10","matchCriteriaId":"17D081E7-E4F0-4E0F-BEBF-BF3AD0641861"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.2","matchCriteriaId":"3C4BC53A-0E69-4CDE-B89A-E6AAC3ADB1E0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-357","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-47537","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-15T14:15:45.240","lastModified":"2026-06-17T06:32:51.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4 all versions\t allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta en Fortinet FortiOS 7.0.0 - 7.0.13, 7.2.0 - 7.2.6 y 7.4.0 - 7.4.1 permite que un atacante remoto y no autenticado realice un ataque Man-in-the-Middle en el Canal de comunicación FortiLink entre el dispositivo FortiOS y FortiSwitch."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"7.2.0","status":"affected"},{"version":"7.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-21T13:43:02.127242Z","id":"CVE-2023-47537","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"C119229A-3805-47C1-B3F9-AF1A4007A63B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.6","matchCriteriaId":"24D09A92-81EC-4003-B017-C67FC739EEBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"17FE168A-0EA4-467C-91D2-87EB6D83917A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-301","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23113","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-15T14:15:46.503","lastModified":"2026-06-17T07:12:03.503","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets."},{"lang":"es","value":"Un uso de cadena de formato controlada externamente en Fortinet FortiOS versiones 7.4.0 a 7.4.2, 7.2.0 a 7.2.6, 7.0.0 a 7.0.13, FortiProxy versiones 7.4.0 a 7.4.2, 7.2.0 a 7.2.8, 7.0.0 a 7.0.14, versiones de FortiPAM 1.2.0, 1.1.0 a 1.1.2, 1.0.0 a 1.0.3, versiones de FortiSwitchManager 7.2.0 a 7.2.3, 7.0.0 a 7.0. 3 permite al atacante ejecutar código o comandos no autorizados a través de paquetes especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","versions":[{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiswitchmanager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiswitchmanager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortipam","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"}]},{"vendor":"fortinet","product":"fortipam","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"}]},{"vendor":"fortinet","product":"fortipam","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-09T12:58:44.488595Z","id":"CVE-2024-23113","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2024-10-09","cisaActionDue":"2024-10-30","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet Multiple Products Format String Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.14","matchCriteriaId":"94C6FBEA-B8B8-4A92-9CAF-F4A125577C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.8","matchCriteriaId":"406F8C48-85CE-46AF-BE5C-0ED9E3E16A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.2","matchCriteriaId":"A8DD8789-6485-49E6-92D3-74004D9B6E9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"CF2B9FD3-9581-465E-A5E1-A1BCEFB0DFA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"094185B2-8DC1-46C2-B160-31BEEFDB2CC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.13","matchCriteriaId":"DF27CA2F-3F4C-4CCB-B832-0E792673C429"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.6","matchCriteriaId":"24D09A92-81EC-4003-B017-C67FC739EEBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.2","matchCriteriaId":"49C323D0-5B01-4DB2-AB98-7113D8E607B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.3","matchCriteriaId":"3BA2C6ED-2765-4B56-9B37-10C50BD32C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.2","matchCriteriaId":"D0060F1F-527F-4E91-A59F-F3141977CB7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6D0927D1-F469-4344-B4C9-3190645F5899"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-029","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-24-029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23113","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2023-42791","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-20T14:15:08.030","lastModified":"2026-06-17T06:24:30.877","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Un path traversal relativo en Fortinet FortiManager versión 7.4.0 y 7.2.0 a 7.2.3 y 7.0.0 a 7.0.8 y 6.4.0 a 6.4.12 y 6.2.0 a 6.2.11 permite al atacante ejecutar código no autorizado o comandos a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortianalyzer","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThan":"7.4.1","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortimanager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThan":"7.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T17:13:32.925996Z","id":"CVE-2023-42791","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.12","matchCriteriaId":"3B418DF4-DAFA-4E46-A1F5-4A39B1F900BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.13","matchCriteriaId":"759002A3-0C2E-4CC2-9410-4BCF50E80EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"81930DE4-3E44-4E74-B9FA-3AC83A44A45B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"5BC35BBC-5F0C-4802-8F00-643D465D43E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-189","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-29179","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-22T10:15:07.693","lastModified":"2026-06-17T05:49:33.163","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, Fortiproxy version 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 allows attacker to denial of service via  specially crafted HTTP requests."},{"lang":"es","value":"Una desreferencia de puntero nulo en Fortinet FortiOS versión 7.2.0 a 7.2.4, 7.0.0 a 7.0.11, 6.4.0 a 6.4.12, Fortiproxy versión 7.2.0 a 7.2.4, 7.0.0 a 7.0.10 permite atacante a la denegación de servicio a través de solicitudes HTTP especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-22T16:40:02.132971Z","id":"CVE-2023-29179","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.13","matchCriteriaId":"B153B056-24AE-41C4-B644-65E080C18360"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"39A6C2A7-21A4-4BB5-A3B6-9466E5CEA296"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4562BDF7-D894-4CD8-95AC-9409FDEBE73F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"A5D70694-BB02-43E2-8F74-D50D9D4C5E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"122518E7-EA43-4240-AAFB-61AD2AA28A2B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-125","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-29180","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-22T10:15:07.947","lastModified":"2026-10-22T14:17:30.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.3, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0.0 through 2.0.12, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to denial of service via specially crafted HTTP requests."},{"lang":"es","value":"Una desreferencia de puntero nulo en Fortinet FortiOS versión 7.2.0 a 7.2.4, 7.0.0 a 7.0.11, 6.4.0 a 6.4.12, 6.2.0 a 6.2.14, 6.0.0 a 6.0.16, FortiProxy 7.2 .0 a 7.2.3, 7.0.0 a 7.0.10, 2.0.0 a 2.0.12, 1.2.0 a 1.2.13, 1.1.0 a 1.1.6, 1.0.0 a 1.0.7 permite al atacante negar del servicio a través de solicitudes HTTP especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.14","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.12","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2..14","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.12","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-14T19:10:11.418944Z","id":"CVE-2023-29180","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.13","matchCriteriaId":"A233FC6A-9ABE-46AC-8332-0DD0075C6DB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"A5D70694-BB02-43E2-8F74-D50D9D4C5E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"9A0AB0B8-819F-46EE-A921-119B76A138B5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.17","matchCriteriaId":"F15A3418-4EE7-402B-9711-4F577FC64397"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.15","matchCriteriaId":"05454D49-17D8-4A7D-92C8-B33B006A35DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.13","matchCriteriaId":"B153B056-24AE-41C4-B644-65E080C18360"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"39A6C2A7-21A4-4BB5-A3B6-9466E5CEA296"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4562BDF7-D894-4CD8-95AC-9409FDEBE73F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-111","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-29181","sourceIdentifier":"psirt@fortinet.com","published":"2024-02-22T10:15:08.140","lastModified":"2026-10-22T14:17:30.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS 6.0.0 through 6.0.16, FortiOS 5.6 all versions, FortiOS 5.4 all versions, FortiOS 5.2 all versions, FortiOS 5.0 all versions, FortiOS 4.3 all versions, FortiOS 4.2 all versions, FortiOS 4.1 all versions, FortiOS 4.0 all versions, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.4, FortiProxy 7.0.0 through 7.0.10, FortiProxy 2.0.0 through 2.0.12, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specially crafted command."},{"lang":"es","value":"Un uso de cadena de formato controlada externamente en Fortinet FortiOS 7.2.0 a 7.2.4, 7.0.0 a 7.0.11, 6.4.0 a 6.4.12, 6.2.0 a 6.2.14, 6.0.0 a 6.0.16 , FortiProxy 7.2.0 a 7.2.4, 7.0.0 a 7.0.10, 2.0.0 a 2.0.12, 1.2.0 a 1.2.13, 1.1.0 a 1.1.6, 1.0.0 a 1.0.7, FortiPAM 1.0.0 a 1.0.3 permite a un atacante ejecutar código o comandos no autorizados mediante un comando especialmente manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.14","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.14","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.13","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.15","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.14","versionType":"semver","status":"affected"},{"version":"4.3.0","lessThanOrEqual":"4.3.19","versionType":"semver","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.16","versionType":"semver","status":"affected"},{"version":"4.1.1","lessThanOrEqual":"4.1.11","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.12","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.14","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.14","versionType":"custom","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.13","versionType":"custom","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.15","versionType":"custom","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.14","versionType":"custom","status":"affected"},{"version":"4.3.0","lessThanOrEqual":"4.3.19","versionType":"custom","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.1.11","versionType":"custom","status":"affected"},{"version":"4.1.1","lessThanOrEqual":"4.1.11","versionType":"custom","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.4","versionType":"custom","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.2.14","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortipam","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*"],"versions":[{"version":"1.00","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.12","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-22T16:59:29.245878Z","id":"CVE-2023-29181","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"2.0.13","matchCriteriaId":"2D5DD84F-2A2A-40E4-AAE7-516E086556CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"A5D70694-BB02-43E2-8F74-D50D9D4C5E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"122518E7-EA43-4240-AAFB-61AD2AA28A2B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.15","matchCriteriaId":"4D1EB4C4-34D4-449E-AB52-397F3DF750B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.13","matchCriteriaId":"B153B056-24AE-41C4-B644-65E080C18360"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"39A6C2A7-21A4-4BB5-A3B6-9466E5CEA296"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4562BDF7-D894-4CD8-95AC-9409FDEBE73F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.1.0","matchCriteriaId":"5296F4A1-F228-451A-9B42-A418B7DCFFBA"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-119","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36554","sourceIdentifier":"psirt@fortinet.com","published":"2024-03-12T15:15:45.693","lastModified":"2026-06-17T06:06:31.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.10, version 6.4.0 through 6.4.13, 6.2 all versions allows attacker to execute unauthorized code or commands via specially crafted HTTP requests."},{"lang":"es","value":"Un control de acceso inadecuado en Fortinet FortiManager versión 7.4.0, versión 7.2.0 a 7.2.3, versión 7.0.0 a 7.0.10, versión 6.4.0 a 6.4.13, 6.2 todas las versiones permite a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.13","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortimanager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"custom","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.13","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortimanager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-21T04:00:34.995809Z","id":"CVE-2023-36554","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.12","matchCriteriaId":"09105C5B-378F-4E1A-B395-F43573983A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.13","matchCriteriaId":"B632AF2E-739B-4EBA-8780-8AE999C62F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"7A615E88-FCB3-48F4-A6F3-5EDA0F67FE52"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"7C7C73B7-2AE1-4FC2-A37A-89A085796D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-103","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41842","sourceIdentifier":"psirt@fortinet.com","published":"2024-03-12T15:15:45.920","lastModified":"2026-06-17T06:22:54.917","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet  allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments."},{"lang":"es","value":"Un uso de vulnerabilidad de cadena de formato controlada externamente [CWE-134] en Fortinet FortiManager versión 7.4.0 a 7.4.1, versión 7.2.0 a 7.2.3 y anteriores a 7.0.10, Fortinet FortiAnalyzer versión 7.4.0 a 7.4.1 , versión 7.2.0 a 7.2.3 y anteriores a 7.0.10, Fortinet FortiAnalyzer-BigData anterior a 7.2.5 y Fortinet FortiPortal versión 6.0 todas las versiones y la versión 5.3 todas las versiones permite a un atacante privilegiado ejecutar código o comandos no autorizados a través de argumentos de comando especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:6.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.14","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer-BigData","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:6.2.5:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.5","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"},{"version":"6.2.5","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortimanager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortianalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiportal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.14","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-22T14:15:41.817688Z","id":"CVE-2023-41842","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.0.10","matchCriteriaId":"18205067-639E-4A90-AF8C-DA71FB65AEFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"8E0D5DF6-69C6-4325-94D3-D7A44862F62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"CB15106A-8295-4A9E-B5C8-FA9654636B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.5","versionEndIncluding":"6.4.7","matchCriteriaId":"EDF502BF-F59E-4CB9-8E1F-A2F3BD982B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndIncluding":"7.0.6","matchCriteriaId":"08104560-68B1-4264-9C2A-361FB0FC27DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"765A3C8E-92B5-42B2-A9CF-D7A69B7AB258"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"55D89D70-6363-4509-95B2-FCE99B5D2158"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.0.10","matchCriteriaId":"BBD0FF48-FC1A-4406-B939-7E83ED65A57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"5BC35BBC-5F0C-4802-8F00-643D465D43E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"83316FAF-C5DE-4603-B3B2-6796E2FAF1A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"6.0.15","matchCriteriaId":"0123003E-587B-4EC8-83B6-0C5D87A8AC10"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-304","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-42789","sourceIdentifier":"psirt@fortinet.com","published":"2024-03-12T15:15:46.107","lastModified":"2026-07-08T13:16:23.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, FortiProxy 2.0.0 through 2.0.13, FortiSASE 23.2.b allows attacker to execute unauthorized code or commands via specially crafted HTTP requests."},{"lang":"es","value":"Una escritura fuera de límites en Fortinet FortiOS 7.4.0 a 7.4.1, 7.2.0 a 7.2.5, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14, 6.2.0 a 6.2.15, FortiProxy 7.4.0, 7.2.0 a 7.2.6, 7.0.0 a 7.0.12, 2.0.0 a 2.0.13 permite a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSASE","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisase:23.2.b:*:*:*:*:*:*:*"],"versions":[{"version":"23.2.b","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortipam","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.13","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-15T16:38:32.476430Z","id":"CVE-2023-42789","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.13","matchCriteriaId":"10E4FB93-7111-4F2A-8D5A-F276261D0E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"E5E2C1A7-AF13-4DBB-8EB4-49BE54EDABAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.6","matchCriteriaId":"3F8AA932-A965-4345-8151-9CACDEE114F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9010968B-B839-4B7C-BFB5-6BD9CBCEC166"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.14","matchCriteriaId":"A2B52E22-C64D-4142-885E-6C44FA670574"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"BA582D59-C740-4AE7-83CA-C09A1D0EDA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.5","matchCriteriaId":"A6E44123-995C-4E08-84B5-FF8C76B67B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"17FE168A-0EA4-467C-91D2-87EB6D83917A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-328","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-42790","sourceIdentifier":"psirt@fortinet.com","published":"2024-03-12T15:15:46.293","lastModified":"2026-07-08T13:16:24.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiProxy 7.4.0, FortiProxy 7.2.0 through 7.2.6, FortiProxy 7.0.0 through 7.0.12, FortiProxy 2.0.0 through 2.0.13, FortiSASE 23.2.b allows attacker to execute unauthorized code or commands via specially crafted HTTP requests."},{"lang":"es","value":"Un desbordamiento de búfer en la región stack de la memoria  en Fortinet FortiOS 7.4.0 a 7.4.1, 7.2.0 a 7.2.5, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14, 6.2.0 a 6.2.15, FortiProxy 7.4.0, 7.2.0 a 7.2.6, 7.0.0 a 7.0.12, 2.0.0 a 2.0.13 permiten al atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-16T04:00:43.736004Z","id":"CVE-2023-42790","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.13","matchCriteriaId":"10E4FB93-7111-4F2A-8D5A-F276261D0E67"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"E5E2C1A7-AF13-4DBB-8EB4-49BE54EDABAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.6","matchCriteriaId":"3F8AA932-A965-4345-8151-9CACDEE114F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9010968B-B839-4B7C-BFB5-6BD9CBCEC166"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.15","matchCriteriaId":"7916D6BB-838E-40A0-9C7F-FBE9ECBA0D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.14","matchCriteriaId":"A2B52E22-C64D-4142-885E-6C44FA670574"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"BA582D59-C740-4AE7-83CA-C09A1D0EDA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.5","matchCriteriaId":"A6E44123-995C-4E08-84B5-FF8C76B67B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.1","matchCriteriaId":"2E2A5347-D536-4D43-A163-5B5A3AFE742C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-328","source":"psirt@fortinet.com"},{"url":"https://fortiguard.com/psirt/FG-IR-23-328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2023-46717","sourceIdentifier":"psirt@fortinet.com","published":"2024-03-12T15:15:46.487","lastModified":"2026-06-17T06:31:24.477","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive login attempts."},{"lang":"es","value":"Una vulnerabilidad de autenticación incorrecta [CWE-287] en las versiones 7.4.1 y anteriores de FortiOS, las versiones 7.2.6 y siguientes y las versiones 7.0.12 y siguientes cuando se configura con FortiAuthenticator en HA puede permitir que un usuario de solo lectura obtenga acceso de lectura y escritura a través de intentos sucesivos de inicio de sesión."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"custom","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-12T18:16:24.708690Z","id":"CVE-2023-46717","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"D25F9C04-C7FD-4B1F-A194-CA69E5DE903C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"553C4BA9-953B-4017-8498-785BDA7A3006"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"4316C2EA-3D6E-4A0C-B81D-ADCE040E03E0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-424","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-47534","sourceIdentifier":"psirt@fortinet.com","published":"2024-03-12T15:15:46.770","lastModified":"2026-10-22T14:17:33.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.0 through 7.0.10, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted packets."},{"lang":"es","value":"Una neutralización inadecuada de elementos de fórmula en un archivo csv en Fortinet FortiClientEMS versión 7.2.0 hasta 7.2.2, 7.0.0 hasta 7.0.10, 6.4.0 hasta 6.4.9, 6.2.0 hasta 6.2.9, 6.0.0 hasta 6.0.8 permite al atacante ejecutar código o comandos no autorizados a través de paquetes especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.02.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.02.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"06.02.00","lessThanOrEqual":"06.02.02","versionType":"semver","status":"affected"},{"version":"6.0.8","status":"affected"},{"version":"06.00.00","lessThanOrEqual":"06.00.06","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlient_endpoint_management_server","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:forticlient_endpoint_management_server:6.0.8:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.8","status":"affected"}]},{"vendor":"fortinet","product":"forticlient_endpoint_management_server","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-21T04:00:36.803943Z","id":"CVE-2023-47534","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1236"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-1236"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.8","matchCriteriaId":"AEDE19DC-94DB-4BEB-8439-C2BE06EF0625"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"D16D1BDE-ED3A-472B-AE5D-9A22B330AD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"C4FE4D98-C047-4A51-BFD2-99ADB9C18BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"BFFE2A11-EE49-46A4-A5C5-4D575CF40C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.2","matchCriteriaId":"62920FE9-2E6A-48BB-A8F7-C57595C862C4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-390","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-48788","sourceIdentifier":"psirt@fortinet.com","published":"2024-03-12T15:15:46.973","lastModified":"2026-06-17T06:34:58.230","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando sql (\"inyección sql\") en Fortinet FortiClientEMS versión 7.2.0 a 7.2.2, FortiClientEMS 7.0.1 a 7.0.10 permite a un atacante ejecutar código o comandos no autorizados a través de paquetes especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlient_enterprise_management_server","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"forticlient_enterprise_management_server","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-16T04:01:14.476146Z","id":"CVE-2023-48788","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2024-03-25","cisaActionDue":"2024-04-15","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiClient EMS SQL Injection Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.0.11","matchCriteriaId":"35945D3A-886A-4BC1-8930-083A5DC61390"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"92FF887E-F119-413F-92F4-B9314C953F9B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-007","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-24-007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-48788","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2024-21761","sourceIdentifier":"psirt@fortinet.com","published":"2024-03-12T15:15:48.740","lastModified":"2026-06-17T07:10:06.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload."},{"lang":"es","value":"Una vulnerabilidad de autorización inadecuada [CWE-285] en los informes de FortiPortal versión 7.2.0 y versiones 7.0.6 e inferiores puede permitir a un usuario descargar informes de otras organizaciones mediante modificaciones en el payload de la solicitud."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiportal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"}]},{"vendor":"fortinet","product":"fortiportal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-23T04:00:54.328319Z","id":"CVE-2024-21761","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"281311DE-FCED-4AB9-8D54-EBD0C8FE53B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2C7F7D4E-DE62-491A-9C00-EAD2595BF2D7"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-016","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-24-016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23112","sourceIdentifier":"psirt@fortinet.com","published":"2024-03-12T15:15:49.090","lastModified":"2026-06-17T07:12:03.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.1 through 7.0.13, 6.4.7 through 6.4.14, and FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 SSL-VPN may allow an authenticated attacker to gain access to another user’s bookmark via URL manipulation."},{"lang":"es","value":"Una omisión de autorización a través de una vulnerabilidad de clave controlada por el usuario [CWE-639] en FortiOS versión 7.4.0 a 7.4.1, 7.2.0 a 7.2.6, 7.0.1 a 7.0.13, 6.4.7 a 6.4.14, y FortiProxy versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.8, 7.0.0 a 7.0.14 SSL-VPN puede permitir que un atacante autenticado obtenga acceso al marcador de otro usuario mediante manipulación de URL."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.1","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.7","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-16T04:00:42.744773Z","id":"CVE-2024-23112","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.14","matchCriteriaId":"94C6FBEA-B8B8-4A92-9CAF-F4A125577C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.8","matchCriteriaId":"406F8C48-85CE-46AF-BE5C-0ED9E3E16A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.2","matchCriteriaId":"A8DD8789-6485-49E6-92D3-74004D9B6E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.7","versionEndIncluding":"6.4.14","matchCriteriaId":"4841D40B-DA6E-4B4A-A698-8E23B3E40101"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndIncluding":"7.0.13","matchCriteriaId":"40193C91-DAF4-4A0D-9AA7-0D4DDE964488"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.6","matchCriteriaId":"24D09A92-81EC-4003-B017-C67FC739EEBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.1","matchCriteriaId":"2E2A5347-D536-4D43-A163-5B5A3AFE742C"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-013","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-24-013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-41677","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:27.400","lastModified":"2026-10-22T14:17:32.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via targeted social engineering attack"},{"lang":"es","value":"Credenciales insuficientemente protegidas en Fortinet FortiProxy 7.4.0, 7.2.0 a 7.2.6, 7.0.0 a 7.0.12, 2.0.0 a 2.0.13, 1.2.0 a 1.2.13, 1.1.0 a 1.1.6 , 1.0.0 a 1.0.7, Fortinet FortiOS 7.4.0 a 7.4.1, 7.2.0 a 7.2.6, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14, 6.2.0 a 6.2.15 , 6.0.0 a 6.0.17 permite al atacante ejecutar código o comandos no autorizados mediante un ataque de ingeniería social dirigido"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"custom","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"custom","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"custom","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"custom","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"custom","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"custom","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"custom","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-11T04:01:14.917820Z","id":"CVE-2023-41677","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"A966233A-245A-4256-A142-84FACB98EE4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"469D97BA-282C-4875-A156-FDA00B5B4093"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"B8AA0CE6-3E57-47D9-8318-215F0C4A2031"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.16","matchCriteriaId":"E9BCDC86-176E-401A-B188-F77E22BCFC2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"4E29353F-8791-4117-BA7A-E32FAB8348A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"D25F9C04-C7FD-4B1F-A194-CA69E5DE903C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"553C4BA9-953B-4017-8498-785BDA7A3006"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"4316C2EA-3D6E-4A0C-B81D-ADCE040E03E0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-493","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-45590","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:27.627","lastModified":"2026-06-17T06:28:52.680","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 through 7.0.4 allows attacker to execute unauthorized code or commands via tricking a FortiClientLinux user into visiting a malicious website"},{"lang":"es","value":"Un control inadecuado de la generación de código (\"inyección de código\") en Fortinet FortiClientLinux versión 7.2.0, 7.0.6 a 7.0.10 y 7.0.3 a 7.0.4 permite a un atacante ejecutar código o comandos no autorizados engañando a un usuario de FortiClientLinux para que visitar un sitio web malicioso"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientLinux","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.6","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"7.0.3","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlient","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*"],"versions":[{"version":"0","lessThan":"7.0.10","versionType":"semver","status":"affected"},{"version":"7.0.3","lessThan":"7.0.4","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"forticlient","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:linux:*:*"],"versions":[{"version":"7.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-11T04:01:08.566633Z","id":"CVE-2023-45590","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"7.0.6","versionEndExcluding":"7.0.11","matchCriteriaId":"0A39CBD1-AAF7-4423-AA29-840CF0DBFD6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.3:*:*:*:*:linux:*:*","matchCriteriaId":"14320E4A-2445-4930-A8D1-B768B7294B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.4:*:*:*:*:linux:*:*","matchCriteriaId":"56EE5E2F-CB22-4294-9AA9-DDB344494D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:linux:*:*","matchCriteriaId":"88271718-0DD4-4717-B403-1B44E2E56C91"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-087","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-47540","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:27.833","lastModified":"2026-06-17T06:32:52.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.0.5 through 3.0.7 allows attacker to execute unauthorized code or commands via CLI."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiSandbox versión 4.4.0 a 4.4.2 y 4.2.0 a 4.2.6 y 4.0.0 a 4.0.5 y 3.2.0 a través 3.2.4 y 3.0.5 a 3.0.7 pueden permitir a un atacante ejecutar código o comandos no autorizados a través de CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.2","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.0.5","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortisandbox","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisandbox:-:*:*:*:*:*:*:*"],"versions":[{"version":"3.0.5","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.5","versionType":"semver","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-11T04:01:11.740369Z","id":"CVE-2023-47540","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.5","versionEndIncluding":"3.0.7","matchCriteriaId":"2407E32F-4136-4490-B198-B9A612A69F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"4.2.7","matchCriteriaId":"6D8EBB53-DB08-44EA-9FE4-87801ACA2C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.3","matchCriteriaId":"DBA7928B-2BC3-4DA6-B4ED-21818D04A1C4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-411","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-47541","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:28.020","lastModified":"2026-06-17T06:32:52.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4 all versions, FortiSandbox 2.3 all versions, FortiSandbox 2.2 all versions, FortiSandbox 2.1 all versions, FortiSandbox 2.0 all versions allows attacker to execute unauthorized code or commands via CLI."},{"lang":"es","value":"Una limitación inadecuada de un nombre de ruta a un directorio restringido (\"path traversal\") en Fortinet FortiSandbox versión 4.4.0 a 4.4.2 y 4.2.0 a 4.2.6 y 4.0.0 a 4.0.5 y 3.2.0 a 3.2. 4 y 3.1.0 a 3.1.5 y 3.0.0 a 3.0.7 y 2.5.0 a 2.5.2 y 2.4.0 a 2.4.1 y 2.3.0 a 2.3.3 y 2.2.0 a 2.2.2 y 2.1.0 a 2.1.3 y 2.0.0 a 2.0.3 permiten a un atacante ejecutar código o comandos no autorizados a través de CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.2","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"},{"version":"2.5.0","lessThanOrEqual":"2.5.2","versionType":"semver","status":"affected"},{"version":"2.4.0","lessThanOrEqual":"2.4.1","versionType":"semver","status":"affected"},{"version":"2.3.0","lessThanOrEqual":"2.3.3","versionType":"semver","status":"affected"},{"version":"2.2.0","lessThanOrEqual":"2.2.2","versionType":"semver","status":"affected"},{"version":"2.1.0","lessThanOrEqual":"2.1.3","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.3","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortisandbox","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.0.0","lessThan":"2.1","versionType":"custom","status":"affected"},{"version":"2.1.0","lessThan":"2.2","versionType":"custom","status":"affected"},{"version":"2.2.0","lessThan":"2.3","versionType":"custom","status":"affected"},{"version":"2.3.0","lessThan":"2.4","versionType":"custom","status":"affected"},{"version":"2.4.0","lessThan":"2.5","versionType":"custom","status":"affected"},{"version":"2.5.0","lessThan":"2.6","versionType":"custom","status":"affected"},{"version":"3.0.0","lessThan":"3.1","versionType":"custom","status":"affected"},{"version":"3.1.0","lessThan":"3.2","versionType":"custom","status":"affected"},{"version":"3.2.0","lessThan":"3.3","versionType":"custom","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.6","versionType":"custom","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.2","versionType":"custom","status":"affected"},{"version":"4.0.0","lessThan":"4.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-11T04:01:12.790570Z","id":"CVE-2023-47541","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"4.2.7","matchCriteriaId":"A0015F37-9D06-40B3-96B6-286457D54069"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.3","matchCriteriaId":"DBA7928B-2BC3-4DA6-B4ED-21818D04A1C4"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-416","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-47542","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:28.207","lastModified":"2026-06-17T06:32:52.330","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and below, versions 7.2.4 and below, and 7.0.10 and below allows attacker to execute unauthorized code or commands via specially crafted templates."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un motor de plantillas [CWE-1336] en FortiManager versiones 7.4.1 e inferiores, versiones 7.2.4 e inferiores, y 7.0.10 e inferiores permite al atacante ejecutar código o comandos no autorizados a través de plantillas especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortimanager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortimanager:-:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.10","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-26T18:40:35.733370Z","id":"CVE-2023-47542","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1336"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"5B1EF673-5967-401E-98E3-B7A2B1BEF037"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4763E504-6974-42C5-B912-3E62A9CC312A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"83316FAF-C5DE-4603-B3B2-6796E2FAF1A8"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-419","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-48784","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:28.617","lastModified":"2026-06-17T06:34:57.843","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or commands via specially crafted requests."},{"lang":"es","value":"El uso de una vulnerabilidad de cadena de formato controlada externamente [CWE-134] en FortiOS versión 7.4.1 e inferior, versión 7.2.7 e inferior, versión 7.0.14 e inferior, versión 6.4.15 e inferior, la interfaz de línea de comando puede permitir una interfaz de línea de comando local. Atacante privilegiado con perfil de superadministrador y acceso CLI para ejecutar código o comandos arbitrarios a través de solicitudes especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"6.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-11T04:01:13.846617Z","id":"CVE-2023-48784","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.16","matchCriteriaId":"FA0532A5-31F2-4A92-BF31-6003E28AC948"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"4316C2EA-3D6E-4A0C-B81D-ADCE040E03E0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-413","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-21755","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:30.977","lastModified":"2026-06-17T07:10:05.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted requests.."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiSandbox versión 4.4.0 a 4.4.3 y 4.2.0 a 4.2.6 y 4.0.0 a 4.0.4 permite al atacante ejecutar no autorizados código o comandos a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.3","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortisandbox","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.0.0","lessThanOrEqual":"4.0.4","versionType":"custom","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.6","versionType":"custom","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-11T04:01:09.626738Z","id":"CVE-2024-21755","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.5","matchCriteriaId":"86397C25-3189-4C22-8D2D-C88BC9569127"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.7","matchCriteriaId":"958CF981-06BE-44FF-B5CF-156649D86232"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.4","matchCriteriaId":"7A2DF9F8-E286-4404-93A0-D80C99DD48A8"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-489","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-21756","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:31.173","lastModified":"2026-06-17T07:10:06.097","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted requests.."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiSandbox versión 4.4.0 a 4.4.3 y 4.2.0 a 4.2.6 y 4.0.0 a 4.0.4 permite al atacante ejecutar no autorizados código o comandos a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.3","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortisandbox","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.0.0","lessThanOrEqual":"4.0.4","versionType":"custom","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.6","versionType":"custom","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-11T04:01:10.658643Z","id":"CVE-2024-21756","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.5","matchCriteriaId":"86397C25-3189-4C22-8D2D-C88BC9569127"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.7","matchCriteriaId":"958CF981-06BE-44FF-B5CF-156649D86232"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.4","matchCriteriaId":"7A2DF9F8-E286-4404-93A0-D80C99DD48A8"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-489","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23662","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:31.370","lastModified":"2026-06-17T07:13:19.990","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and 6.4.0 through 6.4.15 allows attacker to information disclosure via HTTP requests."},{"lang":"es","value":"La exposición de información confidencial a un actor no autorizado en Fortinet FortiOS al menos en la versión 7.4.0 a 7.4.1 y 7.2.0 a 7.2.5 y 7.0.0 a 7.0.15 y 6.4.0 a 6.4.15 permite al atacante a la divulgación de información a través de solicitudes HTTP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"custom","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-09T19:58:39.327704Z","id":"CVE-2024-23662","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"C84C7A2F-EE15-4CAA-BC3F-A7FDD8A4574F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"4316C2EA-3D6E-4A0C-B81D-ADCE040E03E0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-224","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23671","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:31.560","lastModified":"2026-06-17T07:13:21.253","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.3, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4 allows attacker to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Una limitación inadecuada de un nombre de ruta a un directorio restringido (\"path traversal\") en Fortinet FortiSandbox versión 4.4.0 a 4.4.3 y 4.2.0 a 4.2.6 y 4.0.0 a 4.0.4 permite a un atacante ejecutar código no autorizado o comandos a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.3","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortisandbox","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.3","versionType":"custom","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.6","versionType":"custom","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-09T20:02:07.383916Z","id":"CVE-2024-23671","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.5","matchCriteriaId":"86397C25-3189-4C22-8D2D-C88BC9569127"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.7","matchCriteriaId":"958CF981-06BE-44FF-B5CF-156649D86232"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.4","matchCriteriaId":"7A2DF9F8-E286-4404-93A0-D80C99DD48A8"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-454","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-31487","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-09T15:15:31.753","lastModified":"2026-06-17T07:28:31.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox 2.5 all versions, FortiSandbox 2.4 all versions allows attacker to information disclosure via crafted http requests."},{"lang":"es","value":"Una limitación inadecuada de un nombre de ruta a un directorio restringido (\"path traversal\") en Fortinet FortiSandbox versión 4.4.0 a 4.4.4 y 4.2.0 a 4.2.6 y 4.0.0 a 4.0.5 y 3.2.0 a 3.2. 4 y 3.1.0 a 3.1.5 y 3.0.0 a 3.0.7 y 2.5.0 a 2.5.2 y 2.4.0 a 2.4.1 pueden permitir al atacante la divulgación de información a través de solicitudes http manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:2.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.4","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"},{"version":"2.5.0","lessThanOrEqual":"2.5.2","versionType":"semver","status":"affected"},{"version":"2.4.0","lessThanOrEqual":"2.4.1","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortisandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.4","versionType":"semver","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.5","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"},{"version":"2.5.0","lessThanOrEqual":"2.5.2","versionType":"semver","status":"affected"},{"version":"2.4.0","lessThanOrEqual":"2.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-15T17:19:28.109529Z","id":"CVE-2024-31487","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndExcluding":"4.2.7","matchCriteriaId":"521481E8-AA41-431A-BAD7-1865B4576E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.5","matchCriteriaId":"2C77A903-42B3-41D3-BDC6-E138679B5400"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-060","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-24-060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-31492","sourceIdentifier":"psirt@fortinet.com","published":"2024-04-10T13:51:38.607","lastModified":"2026-06-17T07:28:32.470","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An external control of file name or path vulnerability [CWE-73] in  FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process."},{"lang":"es","value":"Un control externo de la vulnerabilidad de nombre de archivo o ruta [CWE-73] en FortiClientMac versión 7.2.3 y anteriores, versión 7.0.10 y el instalador inferior puede permitir a un atacante local ejecutar código o comandos arbitrarios escribiendo un archivo de configuración malicioso en /tmp antes de iniciar el proceso de instalación."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.6","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlientmac","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:forticlientmac:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"custom","status":"affected"},{"version":"7.0.6","lessThanOrEqual":"7.0.10","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-11T04:01:18.349326Z","id":"CVE-2024-31492","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-73"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.6","versionEndExcluding":"7.0.11","matchCriteriaId":"9B1112E4-7DC3-41EA-9F78-57C80E109C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"A4E41723-27C8-484D-A3B6-384B08B4CE18"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-345","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-36640","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:15:16.640","lastModified":"2026-10-22T14:17:31.317","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0.0 through 6.0.16, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.5, FortiProxy 7.0.0 through 7.0.11, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specially crafted commands"},{"lang":"es","value":"Un uso de cadena de formato controlada externamente en las versiones Fortinet FortiProxy 7.2.0 a 7.2.4, 7.0.0 a 7.0.10, 2.0.0 a 2.0.13, 1.2.0 a 1.2.13, 1.1.0 a 1.1. 6, 1.0.0 a 1.0.7, versiones de FortiPAM 1.0.0 a 1.0.3, versiones de FortiOS 7.2.0, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14, 6.2.0 a 6.2.15, 6.0.0 a 6.0.16 permite al atacante ejecutar código o comandos no autorizados mediante comandos especialmente manipulados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.0","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","lessThanOrEqual":"2.*","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiswitchmanager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiswitchmanager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortipam","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","lessThanOrEqual":"1.1.*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-14T17:49:03.425796Z","id":"CVE-2023-36640","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.7","matchCriteriaId":"22936F53-4480-4011-9211-174D1C507E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.6","matchCriteriaId":"E6BBF05F-4967-4A2E-A8F8-C2086097148B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.13","matchCriteriaId":"33B84D9A-55E3-4146-A55A-ACB507E61B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.14","matchCriteriaId":"3158CE17-3505-4946-9DC9-99FDF741AB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"7E1251FE-2B46-46AA-B474-506B0079810D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4D78C235-F7F5-4611-8467-0CC4F0F69111"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"73C906E2-943B-4710-832D-C29CF175F9BC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.16","matchCriteriaId":"8EA5512D-6EE5-4DF3-A960-C02394F25225"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.16","matchCriteriaId":"E96C569E-0642-4FDD-B65F-A5926B69021A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.14","matchCriteriaId":"A2B52E22-C64D-4142-885E-6C44FA670574"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"BA582D59-C740-4AE7-83CA-C09A1D0EDA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B9B87A2A-4C83-448B-8009-AD20214D58CB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-137","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-40720","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:15:19.067","lastModified":"2026-06-17T06:19:14.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to read the SIP configuration of other users via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una omisión de autorización a través de una vulnerabilidad de clave controlada por el usuario [CWE-639] en FortiVoiceEntreprise versión 7.0.0 a 7.0.1 y anteriores a 6.4.8 permite a un atacante autenticado leer la configuración SIP de otros usuarios a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortivoice","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortivoice","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThan":"6.1.0","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortivoice","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-14T18:45:02.788040Z","id":"CVE-2023-40720","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"C0B44874-E530-40B9-92F5-03667CFB9F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.8","matchCriteriaId":"5FCE3488-2ABC-4608-91D4-8B25A9C180FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BB44AB41-E006-489F-9C49-2DFA73EF01B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"46ED919A-533A-4C6D-9042-B67A9E89FF29"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-282","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44247","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:15:20.807","lastModified":"2026-06-17T06:27:12.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una doble vulnerabilidad gratuita [CWE-415] en Fortinet FortiOS anterior a 7.0.0 puede permitir a un atacante privilegiado ejecutar código o comandos a través de solicitudes HTTP o HTTPs manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.*","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-14T17:43:59.945995Z","id":"CVE-2023-44247","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.16","matchCriteriaId":"E96C569E-0642-4FDD-B65F-A5926B69021A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.15","matchCriteriaId":"884279B3-E480-44E1-B126-5C1029B6BE75"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-195","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-45583","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:15:22.750","lastModified":"2026-10-22T14:17:33.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.5, FortiProxy 7.0.0 through 7.0.11, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiSwitchManager 7.2.0 through 7.2.2, FortiSwitchManager 7.0.0 through 7.0.2 allows attacker to execute unauthorized code or commands via specially crafted cli commands and http requests."},{"lang":"es","value":"Un uso de cadena de formato controlada externamente en Fortinet FortiProxy versiones 7.2.0 a 7.2.5, 7.0.0 a 7.0.11, 2.0.0 a 2.0.13, 1.2.0 a 1.2.13, 1.1.0 a 1.1. 6 Versiones de FortiPAM 1.1.0, 1.0.0 a 1.0.3 Versiones de FortiOS 7.4.0, 7.2.0 a 7.2.5, 7.0.0 a 7.0.13, 6.4.0 a 6.4.14, 6.2.0 a 6.2. 15 Las versiones 7.2.0 a 7.2.2, 7.0.0 a 7.0.2 de FortiSwitchManager permiten a un atacante ejecutar código o comandos no autorizados a través de comandos cli y solicitudes http especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.0","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","lessThanOrEqual":"2.*","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiswitchmanager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiswitchmanager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.16","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortipam","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","lessThanOrEqual":"1.1.*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-14T17:49:39.269934Z","id":"CVE-2023-45583","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.12","matchCriteriaId":"3D9BC2D4-EA5F-448E-A9FA-0445EF6CC9E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartExcluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"CE24A52F-07B6-4E40-955B-7B71826AC299"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"7F75C4E9-62F6-43F2-B941-476F31F8F39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"CC883A39-5441-45A6-AEEB-D916FA39F635"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.6","matchCriteriaId":"97097B62-E92F-49F7-9D48-472C4309A716"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.16","matchCriteriaId":"E96C569E-0642-4FDD-B65F-A5926B69021A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.15","matchCriteriaId":"884279B3-E480-44E1-B126-5C1029B6BE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"BA582D59-C740-4AE7-83CA-C09A1D0EDA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.5","matchCriteriaId":"A6E44123-995C-4E08-84B5-FF8C76B67B29"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.3","matchCriteriaId":"3BA2C6ED-2765-4B56-9B37-10C50BD32C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0CC27DCF-F74C-431C-9545-F405D369AF22"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-137","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-45586","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:15:24.560","lastModified":"2026-06-17T06:28:52.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.12 & FortiProxy SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.13 allows an authenticated VPN user to send (but not receive) packets spoofing the IP of another user via crafted network packets."},{"lang":"es","value":"Una verificación insuficiente de la vulnerabilidad de autenticidad de datos [CWE-345] en Fortinet FortiOS SSL-VPN modo túnel versión 7.4.0 a 7.4.1, versión 7.2.0 a 7.2.7 y anteriores a 7.0.12 y versión de modo túnel FortiProxy SSL-VPN 7.4.0 a 7.4.1, versión 7.2.0 a 7.2.7 y anteriores a 7.0.13 permiten que un usuario de VPN autenticado envíe (pero no reciba) paquetes que falsifiquen la IP de otro usuario a través de paquetes de red manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.16","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThan":"7.0.12","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.16","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-14T18:40:45.753206Z","id":"CVE-2023-45586","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-345"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.12","matchCriteriaId":"7C1D5E6B-A23E-4A92-B53C-720AFEB1B951"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"86607BB0-08AB-4E78-913D-B783949D5C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"469D97BA-282C-4875-A156-FDA00B5B4093"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9010968B-B839-4B7C-BFB5-6BD9CBCEC166"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1491795D-14BA-4D82-9CB0-6FA7D35EB64E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.16","matchCriteriaId":"E96C569E-0642-4FDD-B65F-A5926B69021A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.15","matchCriteriaId":"884279B3-E480-44E1-B126-5C1029B6BE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"D25F9C04-C7FD-4B1F-A194-CA69E5DE903C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"17FE168A-0EA4-467C-91D2-87EB6D83917A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-225","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-46714","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:15:25.840","lastModified":"2026-06-17T06:31:24.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attacker over the administrative interface to execute arbitrary code or commands via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria [CWE-121] en Fortinet FortiOS versión 7.2.1 a 7.2.6 y versión 7.4.0 a 7.4.1 permite a un atacante privilegiado sobre la interfaz administrativa ejecutar código o comandos arbitrarios a través de HTTP o Solicitudes HTTP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.1","lessThanOrEqual":"7.2.6","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-14T18:38:21.376226Z","id":"CVE-2023-46714","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndIncluding":"7.2.6","matchCriteriaId":"8D1811FC-A5FC-4828-ACB1-0D2568FA9240"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"17FE168A-0EA4-467C-91D2-87EB6D83917A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-415","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-50180","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:15:27.317","lastModified":"2026-06-17T06:39:14.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other admins."},{"lang":"es","value":"Una exposición de información confidencial del sistema a una vulnerabilidad de esfera de control no autorizada [CWE-497] en FortiADC versión 7.4.1 e inferior, versión 7.2.3 e inferior, versión 7.1.4 e inferior, versión 7.0.5 e inferior, versión 6.2. 6 y siguientes pueden permitir que un administrador de solo lectura vea datos pertenecientes a otros administradores."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiadc:6.2.0:-:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.4","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-14T19:32:32.629359Z","id":"CVE-2023-50180","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-497"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.6","matchCriteriaId":"971BE53E-8213-4B4E-B76F-4B446772EC4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"302D8FF0-69B6-451A-9B5B-E28B2FAA30D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndIncluding":"7.1.4","matchCriteriaId":"C3CACC8D-C349-4BA9-9900-02A7CEA61FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.3","matchCriteriaId":"03EA09FD-30DE-4106-96D8-78949E335634"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C624CB5-F745-4781-839A-B397EC97590B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1B6FB3F3-79CB-4C0B-99D9-078CEFCF7E6E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-433","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23105","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:15:38.967","lastModified":"2026-06-17T07:12:02.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version 7.2.0 through 7.2.1 allows an unauthenticated attack to bypass IP protection through crafted HTTP or HTTPS packets."},{"lang":"es","value":"Una vulnerabilidad de uso de fuente menos confiable [CWE-348] en Fortinet FortiPortal versión 7.0.0 a 7.0.6 y versión 7.2.0 a 7.2.1 permite que un ataque no autenticado evite la protección IP a través de paquetes HTTP o HTTPS manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiportal","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiportal:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiportal","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-14T19:06:08.072196Z","id":"CVE-2024-23105","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-348"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.6","matchCriteriaId":"A94FF899-FAEF-4005-9B23-1F44A949AEEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2C7F7D4E-DE62-491A-9C00-EAD2595BF2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D666A3A5-B094-4A95-8EF6-8CE3E31B48D0"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-021","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-24-021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-26007","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:15:40.370","lastModified":"2026-06-17T07:16:54.540","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests."},{"lang":"es","value":"Una verificación o manejo inadecuado de la vulnerabilidad de condiciones excepcionales [CWE-703] en Fortinet FortiOS versión 7.4.1 permite que un atacante no autenticado provoque una denegación de servicio en la interfaz administrativa a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.1","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-14T17:41:23.032103Z","id":"CVE-2024-26007","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-703"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"17FE168A-0EA4-467C-91D2-87EB6D83917A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-017","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-24-017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-31488","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:17:23.733","lastModified":"2026-06-17T07:28:32.000","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests."},{"lang":"es","value":"Una neutralización inadecuada de entradas durante la vulnerabilidad de generación de páginas web [CWE-79] en FortiNAC versión 9.4.0 a 9.4.4, 9.2.0 a 9.2.8, 9.1.0 a 9.1.10, 8.8.0 a 8.8.11, 8.7.0 a 8.7.6, 7.2.0 a 7.2.3 pueden permitir que un atacante remoto autenticado realice un ataque de Cross Site Scripting (XSS) almacenado y reflejado a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.3","versionType":"semver","status":"affected"},{"version":"9.2.0","lessThanOrEqual":"9.2.8","versionType":"semver","status":"affected"},{"version":"9.1.0","lessThanOrEqual":"9.1.10","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortinac","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.3","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortinac","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortinac:9.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"9.2.0","lessThanOrEqual":"9.2.8","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortinac","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortinac:9.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"9.1.0","lessThanOrEqual":"9.1..10","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortinac","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortinac:8.8.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.8.0","lessThanOrEqual":"8.8.11","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortinac","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortinac:8.7.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.7.0","lessThanOrEqual":"8.7.6","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortinac","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortinac:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-17T04:00:23.122383Z","id":"CVE-2024-31488","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"8E178BCE-6212-4C9F-BDED-090DA849F9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"8.7.0","versionEndExcluding":"9.4.5","matchCriteriaId":"13B96979-AB7A-426A-A6D8-16D6D2295233"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-040","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-24-040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-31491","sourceIdentifier":"psirt@fortinet.com","published":"2024-05-14T17:17:24.197","lastModified":"2026-06-17T07:28:32.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6 allows attacker to execute unauthorized code or commands via HTTP requests."},{"lang":"es","value":"Una aplicación del lado del cliente de la seguridad del lado del servidor en Fortinet FortiSandbox versión 4.4.0 a 4.4.4 y 4.2.0 a 4.2.6 permite al atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.4","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortisandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.4","versionType":"semver","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-16T18:57:33.724991Z","id":"CVE-2024-31491","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-602"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.7","matchCriteriaId":"958CF981-06BE-44FF-B5CF-156649D86232"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.5","matchCriteriaId":"2C77A903-42B3-41D3-BDC6-E138679B5400"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-054","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-24-054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-48789","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-03T08:15:08.507","lastModified":"2026-06-17T06:34:58.360","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker to improper access control via crafted HTTP requests."},{"lang":"es","value":"Una aplicación de la seguridad del lado del servidor en Fortinet FortiPortal versión 6.0.0 a 6.0.14 permite al atacante realizar un control de acceso inadecuado a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-04T19:35:46.498010Z","id":"CVE-2023-48789","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-602"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.15","matchCriteriaId":"9CE5BD60-C70A-492C-BC35-5F568A4F180D"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-406","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23107","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-03T08:15:08.837","lastModified":"2026-06-17T07:12:02.680","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiWeb version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, 6.3 all versions may allow an authenticated attacker to read password hashes of other administrators via CLI commands."},{"lang":"es","value":"Una exposición de información confidencial a una vulnerabilidad de actor no autorizado [CWE-200] en FortiWeb versión 7.4.0, versión 7.2.4 e inferiores, versión 7.0.8 e inferiores, 6.3 todas las versiones puede permitir que un atacante autenticado lea hashes de contraseñas de otros administradores a través de comandos CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.23","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiweb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.23","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-03T18:49:35.449772Z","id":"CVE-2024-23107","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.23","matchCriteriaId":"29BAA789-62A7-4040-B6F7-8E70FFBA0399"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"35984797-44FF-47BD-88EA-5D10EC20B036"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"1C7674CB-CC74-4486-A6FB-CB95CA909C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5E0DF8E-3272-4302-A1A0-F7981E383E47"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-191","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-31493","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-03T08:15:09.097","lastModified":"2026-06-17T07:28:32.583","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper removal of sensitive information before storage or transfer vulnerability [CWE-212] in FortiSOAR version 7.3.0, version 7.2.2 and below, version 7.0.3 and below may allow an authenticated low privileged user to read Connector passwords in plain-text via HTTP responses."},{"lang":"es","value":"Una eliminación inadecuada de información confidencial antes de la vulnerabilidad de almacenamiento o transferencia [CWE-212] en FortiSOAR versión 7.3.0, versión 7.2.2 e inferiores, versión 7.0.3 e inferiores puede permitir que un usuario autenticado con privilegios bajos lea las contraseñas del conector en formato texto plano a través de respuestas HTTP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","versions":[{"version":"7.3.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-03T14:10:28.453232Z","id":"CVE-2024-31493","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-212"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.3.1","matchCriteriaId":"D6231C3C-7555-42EA-9AE1-46D63698493D"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-052","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23664","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-03T10:15:12.620","lastModified":"2026-06-17T07:13:20.240","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6.0, version 6.5.3 and below, version 6.4.9 and below may allow an attacker to to redirect users to an arbitrary website via a crafted URL."},{"lang":"es","value":"Una redirección de URL a un sitio que no es de confianza (\"redirección abierta\") en Fortinet FortiAuthenticator versión 6.6.0, versión 6.5.3 e inferiores, versión 6.4.9 e inferiores puede permitir a un atacante redirigir a los usuarios a un sitio web arbitrario a través de una URL manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","versions":[{"version":"6.6.0","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiauthenticator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiauthenticator:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiauthenticator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiauthenticator:6.5.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.5.0","lessThanOrEqual":"6.5.3","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortiauthenticator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.6.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-03T17:58:01.387102Z","id":"CVE-2024-23664","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.5.4","matchCriteriaId":"7B5E316E-C98F-4090-9AEB-685E7D9EBD94"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"17E99B35-4807-47F3-9701-2540E93E47A2"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-465","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23665","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-03T10:15:12.870","lastModified":"2026-06-17T07:13:20.367","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below, version 7.2.7 and below, version 7.0.10 and below, version 6.4.3 and below, version 6.3.23 and below may allow an authenticated attacker to perform unauthorized ADOM operations via crafted requests."},{"lang":"es","value":"Múltiples vulnerabilidades de autorización inadecuada [CWE-285] en FortiWeb versión 7.4.2 y anteriores, versión 7.2.7 y siguientes, versión 7.0.10 y siguientes, versión 6.4.3 y siguientes, versión 6.3.23 y siguientes pueden permitir un atacante autenticado para realizar operaciones ADOM no autorizadas a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.23","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-03T13:39:32.057887Z","id":"CVE-2024-23665","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.23","matchCriteriaId":"29BAA789-62A7-4040-B6F7-8E70FFBA0399"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.3","matchCriteriaId":"AF5ED7B3-39F3-49FD-82D9-72CAB2D68636"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.10","matchCriteriaId":"744A540A-BC0F-4F64-8F26-F309D895359B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"AA10A5FC-77B4-4FEE-AB50-EF76450268A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"B35B6E72-8578-4C35-80CF-66D0B74DAFC4"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-474","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23667","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-03T10:15:13.100","lastModified":"2026-07-08T14:16:50.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI."},{"lang":"es","value":"Una autorización inadecuada en Fortinet FortiWebManager versión 7.2.0 y 7.0.0 hasta 7.0.4 y 6.3.0 y 6.2.3 hasta 6.2.4 y 6.0.2 permite al atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP o CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWebManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiwebmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.3.0","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.2","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:6.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.3.0","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:6.2.3:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:6.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-03T16:49:28.332661Z","id":"CVE-2024-23667","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.3","versionEndExcluding":"6.2.5","matchCriteriaId":"C00F44FF-9533-4354-9060-A74E8F43E747"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"403F07C3-8D48-4403-B9EE-0076F8639CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6AB742D6-5B08-4FF7-A366-F4CE1E91C9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A921BEEB-D912-471E-8176-8804F5CD5118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1C7475A8-52EB-413E-A196-6F43137B545F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-222","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23668","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-03T10:15:13.320","lastModified":"2026-07-08T14:16:50.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI."},{"lang":"es","value":"Una autorización inadecuada en Fortinet FortiWebManager versión 7.2.0 y 7.0.0 hasta 7.0.4 y 6.3.0 y 6.2.3 hasta 6.2.4 y 6.0.2 permite al atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP o CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWebManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiwebmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.3.0","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.2","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:6.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.3.0","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:6.2.3:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:6.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-03T16:42:57.390397Z","id":"CVE-2024-23668","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.3","versionEndExcluding":"6.2.5","matchCriteriaId":"C00F44FF-9533-4354-9060-A74E8F43E747"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"403F07C3-8D48-4403-B9EE-0076F8639CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6AB742D6-5B08-4FF7-A366-F4CE1E91C9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A921BEEB-D912-471E-8176-8804F5CD5118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1C7475A8-52EB-413E-A196-6F43137B545F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-222","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23670","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-03T10:15:13.523","lastModified":"2026-07-08T14:16:51.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI."},{"lang":"es","value":"Una autorización inadecuada en Fortinet FortiWebManager versión 7.2.0 y 7.0.0 hasta 7.0.4 y 6.3.0 y 6.2.3 hasta 6.2.4 y 6.0.2 permite al atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP o CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWebManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiwebmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.3.0","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.2","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:6.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.3.0","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:6.2.3:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:6.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-03T16:51:43.637231Z","id":"CVE-2024-23670","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.3","versionEndExcluding":"6.2.5","matchCriteriaId":"C00F44FF-9533-4354-9060-A74E8F43E747"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"403F07C3-8D48-4403-B9EE-0076F8639CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6AB742D6-5B08-4FF7-A366-F4CE1E91C9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A921BEEB-D912-471E-8176-8804F5CD5118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1C7475A8-52EB-413E-A196-6F43137B545F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-222","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23669","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-05T08:15:09.537","lastModified":"2026-07-08T14:16:50.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI."},{"lang":"es","value":"Una autorización inadecuada en Fortinet FortiWebManager versión 7.2.0 y 7.0.0 hasta 7.0.4 y 6.3.0 y 6.2.3 hasta 6.2.4 y 6.0.2 permite al atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP o CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWebManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiwebmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwebmanager:6.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.3.0","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.2","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiweb_manager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb_manager:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.3.0","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-05T14:06:39.473309Z","id":"CVE-2024-23669","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.3","versionEndExcluding":"6.2.5","matchCriteriaId":"C00F44FF-9533-4354-9060-A74E8F43E747"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"403F07C3-8D48-4403-B9EE-0076F8639CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6AB742D6-5B08-4FF7-A366-F4CE1E91C9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A921BEEB-D912-471E-8176-8804F5CD5118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwebmanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1C7475A8-52EB-413E-A196-6F43137B545F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-222","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-23775","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-11T15:15:53.723","lastModified":"2026-06-17T05:37:56.337","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de neutralización inadecuada de elementos especiales utilizados en comandos SQL (\"Inyección SQL\") [CWE-89] en FortiSOAR 7.2.0 y anteriores a 7.0.3 pueden permitir que un atacante autenticado ejecute código o comandos no autorizados a través de parámetros de cadenas específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-11T18:46:02.668574Z","id":"CVE-2023-23775","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.1","matchCriteriaId":"C649B619-D676-440E-9329-8467A2DD769E"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-448","source":"psirt@fortinet.com","tags":["Broken Link"]},{"url":"https://fortiguard.com/psirt/FG-IR-22-448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2023-46720","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-11T15:15:55.087","lastModified":"2026-06-17T06:31:24.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted CLI commands."},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en Fortinet FortiOS versión 7.4.0 a 7.4.1 y 7.2.0 a 7.2.7 y 7.0.0 a 7.0.12 y 6.4.6 a 6.4.15 y 6.2.9 a 6.2.16 y Las versiones 6.0.13 a 6.0.18 permiten a un atacante ejecutar código o comandos no autorizados a través de comandos CLI especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.6","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.9","lessThanOrEqual":"6.2.16","versionType":"semver","status":"affected"},{"version":"6.0.13","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.6","lessThanOrEqual":"6.4.15","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.9","lessThanOrEqual":"6.2.16","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.13","lessThanOrEqual":"6.0.18","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-14T03:55:23.431257Z","id":"CVE-2023-46720","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.13","versionEndIncluding":"6.0.18","matchCriteriaId":"B338ECA4-60FD-499E-B22B-0F6D892C1896"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.9","versionEndIncluding":"6.2.16","matchCriteriaId":"6C51858C-80AE-4826-ABB8-6A678FA2F075"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.6","versionEndIncluding":"6.4.15","matchCriteriaId":"E375A348-5D58-4EE0-9729-3A62BA8B7741"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.12","matchCriteriaId":"BA582D59-C740-4AE7-83CA-C09A1D0EDA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"757A5257-6103-4DC5-B79F-727E4279614A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-356","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-21754","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-11T15:16:03.433","lastModified":"2026-06-17T07:10:05.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged attacker with super-admin profile and CLI access to decrypting the backup file."},{"lang":"es","value":"Un uso de hash de contraseña con vulnerabilidad de esfuerzo computacional insuficiente [CWE-916] que afecta a FortiOS versión 7.4.3 e inferior, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones y FortiProxy versión 7.4.2 e inferior, 7.2 todas las versiones, 7.0 todas versiones, 2.0, todas las versiones pueden permitir que un atacante privilegiado con perfil de superadministrador y acceso CLI pueda descifrar el archivo de copia de seguridad."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N","baseScore":1.8,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-11T16:13:02.843870Z","id":"CVE-2024-21754","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.14","matchCriteriaId":"3158CE17-3505-4946-9DC9-99FDF741AB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.18","matchCriteriaId":"216CB66F-E038-43F5-80AC-3F2735C354DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.11","matchCriteriaId":"1B10CB2F-7086-479A-A826-CF78F19CFB8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"4A077234-F19C-4E87-A7A5-A266B5C903C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.15","matchCriteriaId":"884279B3-E480-44E1-B126-5C1029B6BE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.15","matchCriteriaId":"F75019A7-F58D-4863-AE73-B63E38C8D880"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"678EB0FA-2B29-4108-8378-C4803A543193"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-423","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23110","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-11T15:16:03.707","lastModified":"2026-06-17T07:12:03.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versions allows attacker to execute unauthorized code or commands via specially crafted commands"},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en Fortinet FortiOS versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.6, 7.0.0 a 7.0.13, 6.4.0 a 6.4.14, 6.2.0 a 6.2.15, 6.0 todas las versiones permiten al atacante ejecutar código o comandos no autorizados mediante comandos especialmente manipulados"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.15","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-13T00:00:00+00:00","id":"CVE-2024-23110","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.16","matchCriteriaId":"E9BCDC86-176E-401A-B188-F77E22BCFC2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"4E29353F-8791-4117-BA7A-E32FAB8348A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"C119229A-3805-47C1-B3F9-AF1A4007A63B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"553C4BA9-953B-4017-8498-785BDA7A3006"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"757A5257-6103-4DC5-B79F-727E4279614A"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-460","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23111","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-11T15:16:03.957","lastModified":"2026-06-17T07:12:03.213","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions reboot page may allow a remote privileged attacker with super-admin access to execute JavaScript code via crafted HTTP GET requests."},{"lang":"es","value":"Un uso de hash de contraseña con vulnerabilidad de esfuerzo computacional insuficiente [CWE-916] que afecta a FortiOS versión 7.4.3 e inferior, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones y FortiProxy versión 7.4.2 e inferior, 7.2 todas las versiones, 7.0 todas versiones, 2.0, todas las versiones pueden permitir que un atacante privilegiado con perfil de superadministrador y acceso CLI pueda descifrar el archivo de copia de seguridad."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.2","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.8","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.14","versionType":"custom","status":"affected"},{"version":"2.0.0","lessThan":"2.1.0","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.2","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.8","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.14","versionType":"custom","status":"affected"},{"version":"2.0.0","lessThan":"2.1.0","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.2","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.8","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.14","versionType":"custom","status":"affected"},{"version":"2.0.0","lessThan":"2.1.0","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.2","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.8","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.14","versionType":"custom","status":"affected"},{"version":"2.0.0","lessThan":"2.1.0","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.3","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.7","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.13","versionType":"custom","status":"affected"},{"version":"6.4.0","lessThan":"6.5.0","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.3","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.7","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.13","versionType":"custom","status":"affected"},{"version":"6.4.0","lessThan":"6.5.0","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.3","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.7","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.13","versionType":"custom","status":"affected"},{"version":"6.4.0","lessThan":"6.5.0","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.3","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.7","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.13","versionType":"custom","status":"affected"},{"version":"6.4.0","lessThan":"6.5.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-13T03:55:23.247493Z","id":"CVE-2024-23111","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.15","matchCriteriaId":"72ED8947-DBF3-483B-B267-117403A3D8E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"DF62C95E-AB35-4A8E-84F8-5197E9D33C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"4A077234-F19C-4E87-A7A5-A266B5C903C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"C119229A-3805-47C1-B3F9-AF1A4007A63B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-471","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-26010","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-11T15:16:04.473","lastModified":"2026-10-22T14:17:34.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 through 7.2.9, FortiProxy 7.0.0 through 7.0.16, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.1 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets."},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en Fortinet FortiPAM versión 1.2.0, 1.1.0 a 1.1.2, 1.0.0 a 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager versión 7.2.0 a 7.2.3, 7.0.1 a 7.0. 3, FortiOS versión 7.4.0 a 7.4.3, 7.2.0 a 7.2.7, 7.0.0 a 7.0.14, 6.4.0 a 6.4.15, 6.2.0 a 6.2.16, 6.0.0 a 6.0. 18, FortiProxy versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.9, 7.0.0 a 7.0.15, 2.0.0 a 2.0.13, 1.2.0 a 1.2.13, 1.1.0 a 1.1. 6, 1.0.0 a 1.0.7 permite a un atacante ejecutar código o comandos no autorizados a través de paquetes especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-26T19:13:43.887425Z","id":"CVE-2024-26010","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.0.15","matchCriteriaId":"4A93633F-8865-49D7-A5CE-F7D009DFB901"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.3.0","matchCriteriaId":"62F2452A-7AF9-4BD2-932D-D6414699C793"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"7.0.17","matchCriteriaId":"E7E7DA8E-34CB-4527-A4A0-1EDBFBBDA894"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"EDFFA2C3-0A23-4884-B751-785BE598DFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3F2C29AD-A11F-4A5F-8BB0-8600D5F77E72"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.0.4","matchCriteriaId":"EFB333FC-4406-4EBD-B6F2-6C41BCE2E742"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"EB0D2553-E4E6-454A-80F6-9D014A4710D3"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-036","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-31495","sourceIdentifier":"psirt@fortinet.com","published":"2024-06-11T15:16:05.697","lastModified":"2026-06-17T07:28:32.693","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.0.0 through 7.0.6 and version 7.2.0 allows privileged user to obtain unauthorized information via the report download functionality."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando sql (\"inyección sql\") en las versiones 7.0.0 a 7.0.6 y 7.2.0 de Fortinet FortiPortal permite a un usuario privilegiado obtener información no autorizada a través de la funcionalidad de descarga de informes."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiportal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"}]},{"vendor":"fortinet","product":"fortiportal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-11T16:41:37.631630Z","id":"CVE-2024-31495","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"281311DE-FCED-4AB9-8D54-EBD0C8FE53B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2C7F7D4E-DE62-491A-9C00-EAD2595BF2D7"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-128","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-50178","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:03.390","lastModified":"2026-06-17T06:39:14.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and various remote servers such as private SDN connectors and FortiToken Cloud."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta [CWE-295] en FortiADC 7.4.0, 7.2.0 hasta 7.2.3, 7.1 todas las versiones, 7.0 todas las versiones, 6.2 todas las versiones, 6.1 todas las versiones y 6.0 todas las versiones puede permitir un atacante remoto y no autenticado para realizar un ataque Man-in-the-Middle en el canal de comunicación entre el dispositivo y varios servidores remotos, como conectores SDN privados y FortiToken Cloud."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.1.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiadc:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiadc:6.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiadc:6.2.0:-:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiadc:-:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiadc:-:*:*:*:*:*:*:*"],"versions":[{"version":"7.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-11T00:00:00+00:00","id":"CVE-2023-50178","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.4","matchCriteriaId":"3ADB57D8-1ABE-4401-B1B0-4640A34C555A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.6","matchCriteriaId":"D31CF79E-6C56-4CD0-9DD2-FBB48D503786"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"F5275C5C-B6FD-4456-B143-ECDD282150C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.2","matchCriteriaId":"57372C1E-C3EE-4B19-8B24-79B9824634A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndIncluding":"7.2.3","matchCriteriaId":"B81BD40E-F7AF-41E0-A0EB-D12EEC14DFFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C624CB5-F745-4781-839A-B397EC97590B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-298","source":"psirt@fortinet.com","tags":["Third Party Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-50179","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:03.640","lastModified":"2026-06-17T06:39:14.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN connectors."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta [CWE-295] en FortiADC 7.4.0, 7.2 todas las versiones, 7.1 todas las versiones, 7.0 todas las versiones puede permitir que un atacante remoto y no autenticado realice un ataque Man-in-the-Middle en el canal de comunicación entre el dispositivo y los conectores SDN públicos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-12T20:22:12.670372Z","id":"CVE-2023-50179","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.1","matchCriteriaId":"53B9D88E-2D13-4BE9-B5B2-65F9CFEE7BF2"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-480","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-50181","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:03.853","lastModified":"2026-06-17T06:39:15.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in Fortinet FortiADC  version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only authenticated attacker to perform some write actions via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en Fortinet FortiADC versión 7.4.0 a 7.4.1 y anteriores a 7.2.4 permite que un atacante autenticado de solo lectura realice algunas acciones de escritura a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiadc","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T19:28:01.934666Z","id":"CVE-2023-50181","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.2.5","matchCriteriaId":"BABB446D-C65D-410D-95FA-7160C1853858"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"0DAB820D-CA1F-4C05-9897-4DEF5A6E21AD"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-469","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-21759","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:04.357","lastModified":"2026-06-17T07:10:06.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7.0.6 allows attacker to view unauthorized resources via HTTP or HTTPS requests."},{"lang":"es","value":"Una omisión de autorización a través de una clave controlada por el usuario en Fortinet FortiPortal versión 7.2.0 y versiones 7.0.0 a 7.0.6 permite al atacante ver recursos no autorizados a través de solicitudes HTTP o HTTPS."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiportal","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiportal:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T17:03:31.763103Z","id":"CVE-2024-21759","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"281311DE-FCED-4AB9-8D54-EBD0C8FE53B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2C7F7D4E-DE62-491A-9C00-EAD2595BF2D7"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-011","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23663","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:04.593","lastModified":"2026-06-17T07:13:20.113","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control in Fortinet FortiExtender 4.1.1 - 4.1.9, 4.2.0 - 4.2.6, 5.3.2, 7.0.0 - 7.0.4, 7.2.0 - 7.2.4 and 7.4.0 - 7.4.2 allows an attacker to create users with elevated privileges via a crafted HTTP request."},{"lang":"es","value":"Un control de acceso inadecuado en Fortinet FortiExtender 4.1.1 - 4.1.9, 4.2.0 - 4.2.6, 5.3.2, 7.0.0 - 7.0.4, 7.2.0 - 7.2.4 y 7.4.0 - 7.4.2 permite a un atacante crear usuarios con privilegios elevados a través de una solicitud HTTP manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiExtender","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiextender","defaultStatus":"unknown","cpes":["cpe:2.3:h:fortinet:fortiextender:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThan":"7.4.2","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.2.4","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T17:43:01.015107Z","id":"CVE-2024-23663","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.1","versionEndIncluding":"4.1.9","matchCriteriaId":"13C8C635-302D-4495-A0C0-069F08CA9CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.6","matchCriteriaId":"BC6A9F11-62C8-4A04-B1FC-795BD0D80EE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.4","matchCriteriaId":"52A6C42E-B444-4E9D-8DDE-377FDF85FA68"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"57CACD11-5B17-4540-87AF-1B8730C84984"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.2","matchCriteriaId":"D22C31E2-F928-4244-A5CD-CF7F018A17F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"1CC2C9D3-01FD-4D5B-AE85-05B0CA6C99AA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiextender:-:*:*:*:*:*:*:*","matchCriteriaId":"A0617C1D-E321-409D-B54B-775E854A03C1"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-459","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-26015","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:04.810","lastModified":"2026-06-17T07:16:55.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit an unauthenticated attacker to bypass the IP blocklist via crafted requests."},{"lang":"es","value":"Un análisis incorrecto de números con vulnerabilidad de diferentes raíces [CWE-1389] en FortiProxy versión 7.4.3 e inferior, versión 7.2.10 e inferior, versión 7.0.17 e inferior y FortiOS versión 7.4.3 e inferior, versión 7.2.8 y A continuación, la versión 7.0.15 y anteriores, la función de validación de dirección IP puede permitir que un atacante no autenticado omita la lista de bloqueo de IP mediante solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiproxy","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThan":"7.1.0","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThan":"7.3.0","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"}]},{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","cpes":["cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThan":"7.1.0","versionType":"custom","status":"affected"},{"version":"7.2.0","lessThan":"7.3.0","versionType":"custom","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":3.4,"baseSeverity":"LOW","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T16:00:34.064801Z","id":"CVE-2024-26015","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1389"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-704"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.4.3","matchCriteriaId":"662CC1BD-BA5A-4765-9D74-A887690F726F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.15","matchCriteriaId":"F75019A7-F58D-4863-AE73-B63E38C8D880"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.8","matchCriteriaId":"5F669948-010A-4105-9E63-0D47CA92CA10"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.3","matchCriteriaId":"D89D2813-5224-4658-97B8-56CBD3E49ED6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-446","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-27782","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:05.017","lastModified":"2026-06-17T07:20:17.267","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests."},{"lang":"es","value":"Múltiples vulnerabilidades de caducidad de sesión insuficiente [CWE-613] en FortiAIOps versión 2.0.0 pueden permitir a un atacante reutilizar tokens de sesión antiguos robados para realizar operaciones no autorizadas a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAIOps","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.0.0","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiaiops","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T16:54:40.346669Z","id":"CVE-2024-27782","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"46735B4F-511E-4C02-A561-FCF029146F79"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-069","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-27783","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:05.240","lastModified":"2026-06-17T07:20:17.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests."},{"lang":"es","value":"Múltiples vulnerabilidades de Cross Site Request Forgery (CSRF) [CWE-352] en FortiAIOps versión 2.0.0 pueden permitir que un atacante remoto no autenticado realice acciones arbitrarias en nombre de un usuario autenticado engañando a la víctima para que ejecute solicitudes GET maliciosas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAIOps","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","baseScore":7.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T16:06:02.776830Z","id":"CVE-2024-27783","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"46735B4F-511E-4C02-A561-FCF029146F79"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-070","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-27784","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:05.470","lastModified":"2026-06-17T07:20:17.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive information from the API endpoint or log files."},{"lang":"es","value":"Las vulnerabilidades de exposición múltiple de información confidencial a un actor no autorizado [CWE-200] en FortiAIOps versión 2.0.0 pueden permitir que un atacante remoto autenticado recupere información confidencial del endpoint API o archivos de registro."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAIOps","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.0.0","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiaiops","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T17:36:54.102419Z","id":"CVE-2024-27784","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"46735B4F-511E-4C02-A561-FCF029146F79"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-072","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-27785","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:05.687","lastModified":"2026-06-17T07:20:17.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports."},{"lang":"es","value":"Una neutralización inadecuada de elementos de fórmula en una vulnerabilidad de archivo CSV [CWE-1236] en FortiAIOps versión 2.0.0 puede permitir que un atacante remoto autenticado ejecute comandos arbitrarios en la estación de trabajo de un cliente a través de informes CSV envenenados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAIOps","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.3,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.3,"impactScore":3.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T17:49:34.425635Z","id":"CVE-2024-27785","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1236"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"46735B4F-511E-4C02-A561-FCF029146F79"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-073","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-33509","sourceIdentifier":"psirt@fortinet.com","published":"2024-07-09T16:15:05.950","lastModified":"2026-06-17T07:31:53.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions and 6.3 all versions may allow a remote and unauthenticated attacker in a Man-in-the-Middle position to decipher and/or tamper with the communication channel between the device and different endpoints used to fetch data for Web Application Firewall (WAF)."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta [CWE-295] en FortiWeb 7.2.0 a 7.2.1, 7.0 todas las versiones, 6.4 todas las versiones y 6.3 todas las versiones puede permitir que un atacante remoto y no autenticado en una posición de intermediario descifre y/o alterar el canal de comunicación entre el dispositivo y los diferentes endpoints utilizados para recuperar datos para el firewall de aplicaciones web (WAF)."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.23","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"fortiweb","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"6.4.0","status":"affected"},{"version":"6.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-09T15:48:02.416435Z","id":"CVE-2024-33509","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"7.2.2","matchCriteriaId":"41F978BE-CB8B-4B00-AC72-1FE4ABD134DE"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-326","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-27486","sourceIdentifier":"psirt@fortinet.com","published":"2024-08-13T16:15:07.693","lastModified":"2026-06-17T04:37:06.273","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS version 5.5.0 through 5.5.1, 5.4.2 through 5.4.0, 5.3.0 through 5.3.1, 5.2.0, 5.1.0, 5.0.0, 4.7.0, 4.6.0 and 4.5.0 and FortiDDoS-F version 6.3.0 through 6.3.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 allows an authenticated attacker to execute shell code as `root` via `execute` CLI commands."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiDDoS versión 5.5.0 a 5.5.1, 5.4.2 a 5.4.0, 5.3.0 a 5.3.1, 5.2.0, 5.1.0, 5.0.0, 4.7.0, 4.6.0 y 4.5.0 y FortiDDoS-F versión 6.3.0 a 6.3.1, 6.2.0 a 6.2.2, 6.1.0 a 6.1.4 permite una autenticación atacante ejecutar código de shell como \"root\" mediante comandos CLI \"ejecutar\"."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDDoS","defaultStatus":"unaffected","versions":[{"version":"5.7.0","status":"affected"},{"version":"5.5.0","lessThanOrEqual":"5.5.1","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.2","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.2","versionType":"semver","status":"affected"},{"version":"5.2.0","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"},{"version":"4.7.0","status":"affected"},{"version":"4.6.0","status":"affected"},{"version":"4.5.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDDoS-F","defaultStatus":"unaffected","versions":[{"version":"6.5.0","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.4","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.2","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-14T14:40:48.122036Z","id":"CVE-2022-27486","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:*:*:*:*:*:*:*:*","versionStartIncluding":"4.5.0","versionEndExcluding":"5.6.2","matchCriteriaId":"31921E5A-497A-4BD6-9BE8-2307272F3FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"258903F9-C0F0-40CD-8895-43FF00C71709"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","matchCriteriaId":"561DFFB8-E39C-40D1-A7E7-255BDD6F9F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"6.4.2","matchCriteriaId":"777DD368-CD36-4842-BA0F-C7C64E7D2A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0DB1731B-7799-408B-8F8C-F5ABFEA7A180"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-047","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-45862","sourceIdentifier":"psirt@fortinet.com","published":"2024-08-13T16:15:07.977","lastModified":"2026-06-17T05:10:53.193","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7.2 all versions, 7.0 all versions; FortiPAM 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions; FortiSwitchManager 7.2.1 and below, 7.0 all versions GUI may allow attackers to re-use websessions after GUI logout, should they manage to acquire the required credentials."},{"lang":"es","value":"Una vulnerabilidad de caducidad de sesión insuficiente [CWE-613] en FortiOS 7.2.5 y versiones anteriores, 7.0 todas las versiones, 6.4 todas las versiones; FortiProxy 7.2 todas las versiones, 7.0 todas las versiones; FortiPAM 1.3 todas las versiones, 1.2 todas las versiones, 1.1 todas las versiones, 1.0 todas las versiones; FortiSwitchManager 7.2.1 y versiones anteriores, 7.0 todas las versiones de GUI pueden permitir a los atacantes reutilizar sesiones web después de cerrar sesión en la GUI, en caso de que logren adquirir las credenciales requeridas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","versions":[{"version":"1.3.0","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-13T17:32:08.496052Z","id":"CVE-2022-45862","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.0","matchCriteriaId":"C73A0CBF-65BB-4C0A-9A4C-ABE88AF340DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.2","matchCriteriaId":"F1C48730-14E4-4B4A-AD08-BA23903D961E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"C84C7A2F-EE15-4CAA-BC3F-A7FDD8A4574F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.4.0","matchCriteriaId":"1F1595B0-CE4A-4B4E-9F5E-A411A012086F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-445","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-26211","sourceIdentifier":"psirt@fortinet.com","published":"2024-08-13T16:15:08.220","lastModified":"2026-06-17T05:42:50.020","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 through 7.3.2 allows an authenticated, remote attacker to inject arbitrary web script or HTML via the Communications module."},{"lang":"es","value":"Una neutralización inadecuada de la entrada durante la generación de páginas web (\"cross-site scripting\") en Fortinet FortiSOAR 7.3.0 a 7.3.2 permite a un atacante remoto autenticado inyectar scripts web o HTML arbitrarios a través del módulo de Comunicaciones."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","versions":[{"version":"7.3.0","lessThanOrEqual":"7.3.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.3","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-13T15:59:48.473867Z","id":"CVE-2023-26211","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.3.3","matchCriteriaId":"3ECE9A3F-7C5F-4A34-ABB2-CD4E1997CE0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1C3F0E60-3285-43B0-83CD-98A0D5445114"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-088","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-21757","sourceIdentifier":"psirt@fortinet.com","published":"2024-08-13T16:15:08.637","lastModified":"2026-06-17T07:10:06.233","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, as well as Fortinet FortiAnalyzer versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, allows an attacker to modify admin passwords via the device configuration backup."},{"lang":"es","value":"Un cambio de contraseña no verificado en Fortinet FortiManager versiones 7.0.0 a 7.0.10, versiones 7.2.0 a 7.2.4 y versiones 7.4.0 a 7.4.1, así como Fortinet FortiAnalyzer versiones 7.0.0 a 7.0.10, versiones 7.2.0 a 7.2.4 y las versiones 7.4.0 a 7.4.1 permiten a un atacante modificar las contraseñas de administrador a través de la copia de seguridad de la configuración del dispositivo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-13T17:32:07.480043Z","id":"CVE-2024-21757","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-620"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"D5275A3C-5468-424E-B3BB-897221D2B8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"6F3D28A9-5CFD-4838-9630-D6E09FB63CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"CB15106A-8295-4A9E-B5C8-FA9654636B15"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"5B1EF673-5967-401E-98E3-B7A2B1BEF037"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4763E504-6974-42C5-B912-3E62A9CC312A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"83316FAF-C5DE-4603-B3B2-6796E2FAF1A8"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-467","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-36505","sourceIdentifier":"psirt@fortinet.com","published":"2024-08-13T16:15:08.970","lastModified":"2026-06-17T07:36:51.750","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiOS 7.4.0 a 7.4.3, 7.2.5 a 7.2.7, 7.0.12 a 7.0.14 y 6.4.x puede permitir que un atacante que ya haya obtenido acceso de escritura con éxito al sistema subyacente (a través de otro exploit hipotético) para evitar el sistema de verificación de integridad de archivos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.5","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.12","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.13","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-15T14:16:37.203552Z","id":"CVE-2024-36505","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.13","versionEndIncluding":"6.4.15","matchCriteriaId":"B26D3CC8-B77D-4C5C-B3AC-096679F47877"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.12","versionEndExcluding":"7.0.15","matchCriteriaId":"F754A050-02F5-4848-9065-5E15117B227E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.5","versionEndExcluding":"7.2.8","matchCriteriaId":"14113139-B64B-4069-A88F-D1999ED7EC18"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-012","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-45856","sourceIdentifier":"psirt@fortinet.com","published":"2024-09-10T15:15:13.823","lastModified":"2026-06-17T05:10:52.413","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientLinux 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.4, FortiClientAndroid 6.4 all versions, 7.0 all versions, 7.2.0 and FortiClientiOS 5.6 all versions, 6.0.0 through 6.0.1, 7.0.0 through 7.0.6 SAML SSO feature may allow an unauthenticated attacker to man-in-the-middle the communication between the FortiClient and  both the service provider and the identity provider."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta [CWE-295] en FortiClientWindows 6.4 todas las versiones, 7.0.0 a 7.0.7, FortiClientMac 6.4 todas las versiones, 7.0 todas las versiones, 7.2.0 a 7.2.4, FortiClientLinux 6.4 todas las versiones, 7.0 todas las versiones, 7.2.0 a 7.2.4, FortiClientAndroid 6.4 todas las versiones, 7.0 todas las versiones, 7.2.0 y FortiClientiOS 5.6 todas las versiones, 6.0.0 a 6.0.1, 7.0.0 a 7.0.6 La función SSO SAML puede permitir que un atacante no autenticado interfiera en la comunicación entre FortiClient y el proveedor de servicios y el proveedor de identidad."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.3","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.1","versionType":"semver","status":"affected"},{"version":"5.6.5","lessThanOrEqual":"5.6.6","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.1","versionType":"semver","status":"affected"},{"version":"5.4.3","lessThanOrEqual":"5.4.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.1","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.3","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.3","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientAndroid","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.6","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"7.0.2","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"6.4.6","status":"affected"},{"version":"6.4.4","status":"affected"},{"version":"6.4.1","status":"affected"},{"version":"6.0.0","status":"affected"},{"version":"5.6.0","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.2","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientLinux","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-10T19:01:07.692905Z","id":"CVE-2022-45856","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:android:*:*","versionStartIncluding":"5.0","versionEndExcluding":"7.2.1","matchCriteriaId":"41EB773A-2E10-4A28-8135-23AB6EFF4202"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.4","versionEndExcluding":"7.2.5","matchCriteriaId":"717FB16B-4D85-4041-B1AF-A50952D094DD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:mac_os:*:*","versionStartIncluding":"6.4","versionEndExcluding":"7.2.5","matchCriteriaId":"A1022DFE-BAF2-4346-9370-EAFDDB8EA7BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4","versionEndExcluding":"7.0.8","matchCriteriaId":"9DF7E1AD-EF2C-4FB5-80A1-533E89432E31"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:iphone_os:*:*","versionStartIncluding":"2.0","versionEndExcluding":"7.0.7","matchCriteriaId":"6FD622AA-B261-469D-8050-2780BAEE9C35"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-230","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-44254","sourceIdentifier":"psirt@fortinet.com","published":"2024-09-10T15:15:14.173","lastModified":"2026-06-17T06:27:13.667","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and FortiManager version 7.4.1 and before 7.2.5 may allow a remote attacker with low privileges to read sensitive data via a crafted HTTP request."},{"lang":"es","value":"Una vulnerabilidad de omisión de autorización a través de una clave controlada por el usuario [CWE-639] en FortiAnalyzer versión 7.4.1 y anteriores a 7.2.5 y FortiManager versión 7.4.1 y anteriores a 7.2.5 puede permitir que un atacante remoto con privilegios bajos lea datos confidenciales a través de una solicitud HTTP manipulada específicamente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-10T17:13:11.618567Z","id":"CVE-2023-44254","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"04A23C34-DADF-41FE-BCB6-BAF9EC33B7E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9AF01-72FD-4942-A95E-71A7609B6977"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"E73FE85E-A6A7-48A2-B783-539C7CFDF6EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.5","matchCriteriaId":"BD831BAE-D7FB-411E-A28B-BB77ED814AEA"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-204","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-21753","sourceIdentifier":"psirt@fortinet.com","published":"2024-09-10T15:15:14.543","lastModified":"2026-10-22T14:17:34.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all versions, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions, FortiClientEMS 06.00 all versions, FortiClientEMS 6.0 all versions, FortiClientEMS 01.02.02 through 01.02.05 allows attacker to perform a denial of service, read or write a limited number of files via specially crafted HTTP requests"},{"lang":"es","value":"Una limitación incorrecta de una ruta de acceso a un directorio restringido (\"ruta de acceso\") en las versiones 7.2.0 a 7.2.4, 7.0.0 a 7.0.13, 6.4.0 a 6.4.9, 6.2.0 a 6.2.9, 6.0.0 a 6.0.8, 1.2.1 a 1.2.5 de Fortinet FortiClientEMS permite a un atacante realizar una denegación de servicio, leer o escribir una cantidad limitada de archivos a través de solicitudes HTTP especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.02.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.02.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:06.00.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:01.02.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:01.02.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:01.02.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:01.02.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.3:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"06.02.00","lessThanOrEqual":"06.02.02","versionType":"semver","status":"affected"},{"version":"6.0.8","status":"affected"},{"version":"06.00.00","lessThanOrEqual":"06.00.06","versionType":"semver","status":"affected"},{"version":"01.02.02","lessThanOrEqual":"01.02.05","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":4.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-10T18:58:21.335420Z","id":"CVE-2024-21753","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.1","versionEndIncluding":"1.2.5","matchCriteriaId":"80E99ECA-E06D-4361-8592-B06D1534F62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.8","matchCriteriaId":"AEDE19DC-94DB-4BEB-8439-C2BE06EF0625"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"D16D1BDE-ED3A-472B-AE5D-9A22B330AD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"C4FE4D98-C047-4A51-BFD2-99ADB9C18BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.13","matchCriteriaId":"5F76A5C6-0B7E-4E3F-B6DF-4F2607B3D0FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.4","matchCriteriaId":"4CE97B00-1C8A-4B71-9FB3-76AAD0B3EACC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-362","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-31489","sourceIdentifier":"psirt@fortinet.com","published":"2024-09-10T15:15:15.787","lastModified":"2026-06-17T07:28:32.123","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11,  FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and FortiClientMac 7.0.0 through 7.0.11, 7.2.0 through 7.2.4 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the FortiGate and the FortiClient during the ZTNA tunnel creation"},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta [CWE-295] en FortiClientWindows 7.2.0 a 7.2.2, 7.0.0 a 7.0.11, FortiClientLinux 7.2.0, 7.0.0 a 7.0.11 y FortiClientMac 7.0.0 a 7.0.11, 7.2.0 a 7.2.4 puede permitir que un atacante remoto y no autenticado realice un ataque Man-in-the-Middle en el canal de comunicación entre FortiGate y FortiClient durante la creación del túnel ZTNA."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientLinux","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlientmac","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:forticlientmac:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"forticlientlinux","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:forticlientlinux:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"custom","status":"affected"}]},{"vendor":"fortinet","product":"forticlientwindows","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:forticlientwindows:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-10T17:47:00.423144Z","id":"CVE-2024-31489","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"33ADA078-EB03-4E65-B6EF-0922CBC56AB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"8D4523FC-18B6-45A0-9A8D-385B3F33F226"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"292245BC-0B63-42B0-B1B0-E73B0556CF3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"95771ED1-D54C-4E3B-B72E-51D75851BFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"2244A437-D579-4065-8FB0-37476ED7AC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:linux:*:*","matchCriteriaId":"88271718-0DD4-4717-B403-1B44E2E56C91"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-282","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-31490","sourceIdentifier":"psirt@fortinet.com","published":"2024-09-10T15:15:15.983","lastModified":"2026-06-17T07:28:32.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2.2 through 3.2.4, FortiSandbox 3.1.5 allows attacker to information disclosure via HTTP get requests."},{"lang":"es","value":"Una exposición de información confidencial a un actor no autorizado en Fortinet FortiSandbox versión 4.4.0 a 4.4.4 y 4.2.0 a 4.2.6 y 4.0.0 a 4.0.5 y 3.2.2 a 3.2.4 y 3.1.5 permite a un atacante divulgar información a través de solicitudes de obtención HTTP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.4","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.2","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-10T16:21:49.208602Z","id":"CVE-2024-31490","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.2","versionEndExcluding":"4.2.7","matchCriteriaId":"7EED8247-7F5B-4279-B3CA-08A35DE8C907"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.5","matchCriteriaId":"2C77A903-42B3-41D3-BDC6-E138679B5400"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B3B00B3E-608B-46C9-9527-1DFB66624EEF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-051","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-33508","sourceIdentifier":"psirt@fortinet.com","published":"2024-09-10T15:15:16.187","lastModified":"2026-06-17T07:31:53.367","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations on the underlying database via crafted requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en una vulnerabilidad de comando ('Inyección de comando') [CWE-77] en Fortinet FortiClientEMS 7.2.0 a 7.2.4, 7.0.0 a 7.0.12 puede permitir que un atacante no autenticado ejecute operaciones limitadas y temporales en la base de datos subyacente a través de solicitudes manipuladas. "}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlient_endpoint_management_server","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-10T17:28:56.999080Z","id":"CVE-2024-33508","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"806EBE90-88D2-44AC-B7F5-1C0598E08A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"1978E3A0-128F-4982-87C0-9AD4FB67F9B9"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-123","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-35282","sourceIdentifier":"psirt@fortinet.com","published":"2024-09-10T15:15:16.397","lastModified":"2026-06-17T07:34:40.823","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain cleartext passwords via keychain dump."},{"lang":"es","value":"Una vulnerabilidad de almacenamiento de texto plano de información confidencial en la memoria [CWE-316] que afecta a FortiClient VPN iOS 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones, 6.2 todas las versiones, 6.0 todas las versiones puede permitir que un atacante no autenticado que tenga acceso físico a un dispositivo con jailbreak obtenga contraseñas en texto plano a través de un volcado de llavero."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.3","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.2","lessThanOrEqual":"6.4.6","versionType":"semver","status":"affected"},{"version":"6.4.0","status":"affected"},{"version":"6.2.1","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.5,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-10T17:32:37.826003Z","id":"CVE-2024-35282","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-316"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:iphone_os:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"7.2.5","matchCriteriaId":"E4C7743A-14D7-4DB0-A1CF-520D8A3E582B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-139","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-36511","sourceIdentifier":"psirt@fortinet.com","published":"2024-09-10T15:15:16.610","lastModified":"2026-06-17T07:36:52.480","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature"},{"lang":"es","value":"Una verificación de seguridad implementada incorrectamente para la vulnerabilidad estándar [CWE-358] en FortiADC Web Application Firewall (WAF) 7.4.0 a 7.4.4, 7.2 todas las versiones, 7.1 todas las versiones, 7.0 todas las versiones, 6.2 todas las versiones, 6.1 todas las versiones, 6.0 todas las versiones cuando la política de seguridad de cookies está habilitada puede permitir que un atacante, bajo condiciones específicas, recupere la cookie inicial cifrada y firmada protegida por la función."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:7.4.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-10T17:34:03.029026Z","id":"CVE-2024-36511","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-358"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A8E03AC9-E6B8-4DA9-B742-E1946A00A64C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-256","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45323","sourceIdentifier":"psirt@fortinet.com","published":"2024-09-10T15:15:18.420","lastModified":"2026-06-17T07:54:01.610","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include information related to other organizations."},{"lang":"es","value":"Una vulnerabilidad de control de acceso indebido [CWE-284] en FortiEDR Manager API 6.2.0 a 6.2.2, 6.0 todas las versiones puede permitir, en un contexto de entorno compartido, que un administrador autenticado con permisos de API REST en su perfil y restringido a una organización específica acceda a registros de backend que incluyen información relacionada con otras organizaciones."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiEDR Manager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiedrmanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiedrmanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiedrmanager:6.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-10T15:59:27.913308Z","id":"CVE-2024-45323","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedrmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.2","matchCriteriaId":"D55CFC12-7AC0-42DA-83E0-67105284351C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiedrmanager:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CC599F7F-0FC8-4114-92FC-E19A9648A879"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-371","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45327","sourceIdentifier":"psirt@fortinet.com","published":"2024-09-11T10:15:02.023","lastModified":"2026-06-17T07:54:02.173","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization vulnerability [CWE-285] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0 through 7.3.2, 7.2.0 through 7.2.2, 7.0.0 through 7.0.3 change password endpoint may allow an authenticated attacker to perform a brute force attack on users and administrators password via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de autorización indebida [CWE-285] en el endpoint de cambio de contraseña de FortiSOAR versión 7.4.0 a 7.4.3, 7.3.0 a 7.3.2, 7.2.0 a 7.2.2, 7.0.0 a 7.0.3 puede permitir que un atacante autenticado realice un ataque de fuerza bruta en las contraseñas de usuarios y administradores a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-11T00:00:00+00:00","id":"CVE-2024-45327","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.3.3","matchCriteriaId":"28590072-97B9-488D-ABC1-F87D86A0EB25"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"4BEDC5B5-4E5A-410D-885F-BC2B3B38408C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-048","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-33506","sourceIdentifier":"psirt@fortinet.com","published":"2024-10-08T15:15:14.717","lastModified":"2026-06-17T07:31:53.127","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below, 7.2.5 and below, 7.0.12 and below allows a remote authenticated attacker assigned to an Administrative Domain (ADOM) to access device summary of unauthorized ADOMs via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de exposición de información confidencial a un actor no autorizado [CWE-200] en FortiManager 7.4.2 y anteriores, 7.2.5 y anteriores, 7.0.12 y anteriores permite que un atacante remoto autenticado asignado a un dominio administrativo (ADOM) acceda al resumen del dispositivo de ADOM no autorizados a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-08T16:00:39.284052Z","id":"CVE-2024-33506","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.6","matchCriteriaId":"F4DCACA3-788F-475F-B671-E35F232386C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-472","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45330","sourceIdentifier":"psirt@fortinet.com","published":"2024-10-08T15:15:15.010","lastModified":"2026-06-17T07:54:02.500","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests."},{"lang":"es","value":"El uso de una cadena de formato controlada externamente en las versiones 7.4.0 a 7.4.3 y 7.2.2 a 7.2.5 de Fortinet FortiAnalyzer permite a un atacante aumentar sus privilegios a través de solicitudes especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.2","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-08T15:59:58.602194Z","id":"CVE-2024-45330","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.2","versionEndIncluding":"7.2.5","matchCriteriaId":"96A88E7D-908B-4B05-90F2-8BF944D09324"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.3","matchCriteriaId":"FFF24F62-C0CC-4661-A485-C9C029228E00"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.2","versionEndIncluding":"7.2.6","matchCriteriaId":"5EC414C3-BB9F-46BA-BBE3-245AAD9C04F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndIncluding":"7.4.3","matchCriteriaId":"88795189-4FCE-4EDE-A882-75D7D870E511"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-196","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-47575","sourceIdentifier":"psirt@fortinet.com","published":"2024-10-23T15:15:30.707","lastModified":"2026-06-17T07:57:20.260","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests."},{"lang":"es","value":"Una autenticación faltante para una función crítica en FortiManager 7.6.0, FortiManager 7.4.0 a 7.4.4, FortiManager 7.2.0 a 7.2.7, FortiManager 7.0.0 a 7.0.12, FortiManager 6.4.0 a 6.4.14, FortiManager 6.2.0 a 6.2.12, Fortinet FortiManager Cloud 7.4.1 a 7.4.4, FortiManager Cloud 7.2.1 a 7.2.7, FortiManager Cloud 7.0.1 a 7.0.13, FortiManager Cloud 6.4.1 a 6.4.7 permite a un atacante ejecutar código o comandos arbitrarios a través de solicitudes especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-25T18:32:16.885929Z","id":"CVE-2024-47575","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2024-10-23","cisaActionDue":"2024-11-13","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiManager Missing Authentication Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.13","matchCriteriaId":"D7E60883-7F64-4C22-99F9-802A7623DAE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"D2AD66B0-9C99-4F83-80AA-B54E6354ADFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"37456E27-0EE2-4AF8-B92F-A5284FEC0409"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"01E63E1E-4084-4C73-862F-A4CC07914C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"0666260A-1327-4C43-A841-04FB4459449C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0141F06A-F5FE-4DF3-B60E-DD76A1AD8A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndIncluding":"6.4.7","matchCriteriaId":"5BB52FA5-7811-4123-8989-59369583F82F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.0.13","matchCriteriaId":"29B3A5F2-3121-4902-BBB6-8B4D07767F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.8","matchCriteriaId":"E3A26BF0-DF69-42F6-B9D8-D3BEE3DD352C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.5","matchCriteriaId":"6E0BCF26-B311-4FFF-866B-3DCA14A26268"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-423","source":"psirt@fortinet.com","tags":["Exploit","Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-47575","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2023-44255","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:06.850","lastModified":"2026-06-17T06:27:13.860","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una exposición de información confidencial a un actor no autorizado [CWE-200] en Fortinet FortiManager anterior a 7.4.2, FortiAnalyzer anterior a 7.4.2 y FortiAnalyzer-BigData anterior a 7.2.5 puede permitir que un atacante privilegiado con permisos de lectura administrativos lea registros de eventos de otro adom a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T18:26:57.803174Z","id":"CVE-2023-44255","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-359"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.4.3","matchCriteriaId":"452AE920-49A0-4A7C-840C-4AD5510B7AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1","versionEndExcluding":"7.2.6","matchCriteriaId":"6624F8AB-9A5E-43DD-8430-900D3946130F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.4.3","matchCriteriaId":"D7F7A7D1-A7E0-429D-B4F8-BD64A6E2497F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-267","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-47543","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:07.110","lastModified":"2026-06-17T06:32:52.467","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an authenticated attacker to interact with ressources of other organizations via HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad de omisión de autorización a través de una clave controlada por el usuario [CWE-639] en Fortinet FortiPortal versión 7.0.0 a 7.0.3 permite que un atacante autenticado interactúe con recursos de otras organizaciones a través de solicitudes HTTP o HTTPS."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T18:27:51.543700Z","id":"CVE-2023-47543","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"284E34AD-D835-4A57-B393-DDFAC305BA23"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-448","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-50176","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:07.360","lastModified":"2026-08-24T13:16:45.573","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link."},{"lang":"es","value":"Una fijación de sesión en Fortinet FortiOS versión 7.4.0 a 7.4.3 y 7.2.0 a 7.2.7 y 7.0.0 a 7.0.13 permite a un atacante ejecutar código o comandos no autorizados a través de un enlace de autenticación SAML de phishing."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T18:31:16.407439Z","id":"CVE-2023-50176","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-384"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"C119229A-3805-47C1-B3F9-AF1A4007A63B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-475","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23666","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:07.970","lastModified":"2026-06-17T07:13:20.563","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData \r\nat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests."},{"lang":"es","value":"Una aplicación del lado del cliente de la seguridad del lado del servidor en Fortinet FortiAnalyzer-BigData al menos en las versiones 7.4.0 y 7.2.0 a 7.2.6 y 7.0.1 a 7.0.6 y 6.4.5 a 6.4.7 y 6.2.5, FortiManager versión 7.4.0 a 7.4.1 y 7.2.0 a 7.2.4 y 7.0.0 a 7.0.11 y 6.4.0 a 6.4.14, FortiAnalyzer versión 7.4.0 a 7.4.1 y 7.2.0 a 7.2.4 y 7.0.0 a 7.0.11 y 6.4.0 a 6.4.14 permite a un atacante realizar un control de acceso indebido a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T18:45:58.043073Z","id":"CVE-2024-23666","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-602"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"34F71CF0-4C81-4261-BDA8-30287969D137"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"BFAF2532-DF9C-458E-B69B-59C29507F775"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"6FCEF6EE-A923-4DCE-A225-C6D1FB0123E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1","versionEndExcluding":"7.2.7","matchCriteriaId":"50659BC2-500F-4D79-8800-E0B7E9E9E203"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"80598594-A45A-4E69-B968-1DD3DBD30FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"D2AD66B0-9C99-4F83-80AA-B54E6354ADFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"37456E27-0EE2-4AF8-B92F-A5284FEC0409"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"605795FE-4D3E-48D4-B2E6-AED4C79B405F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-396","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-26011","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:08.320","lastModified":"2026-10-22T14:17:35.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiPortal 6.0.0 through 6.0.14, FortiPortal 5.3 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 through 7.2.9, FortiProxy 7.0.0 through 7.0.16, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets."},{"lang":"es","value":"Autenticación faltante para función crítica en Fortinet FortiManager versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.4, 7.0.0 a 7.0.11, 6.4.0 a 6.4.14, FortiPAM versión 1.2.0, 1.1.0 a 1.1.2, 1.0.0 a 1.0.3, FortiProxy versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.9, 7.0.0 a 7.0.17, 2.0.0 a 2.0.14, 1.2.0 a 1.2.13, 1.1.0 a 1.1.6, 1.0.0 a 1.0.7, FortiSwitchManager versión 7.2.0 a 7.2.3, 7.0.0 a 7.0.3, FortiPortal versión 6.0.0 a 6.0.14, FortiOS versión 7.4.0 a 7.4.3, 7.2.0 a 7.2.7, 7.0.0 a 7.0.14, 6.4.0 a 6.4.15, 6.2.0 a 6.2.16, 6.0.0 a 6.0.18 permite a un atacante ejecutar código o comandos no autorizados a través de paquetes especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:6.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:5.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.14","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T18:44:31.679521Z","id":"CVE-2024-26011","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-306"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.0.15","matchCriteriaId":"4A93633F-8865-49D7-A5CE-F7D009DFB901"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.3.0","matchCriteriaId":"18427F16-7339-4A9E-9FA4-EC7A2D3EE218"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"7.0.17","matchCriteriaId":"E7E7DA8E-34CB-4527-A4A0-1EDBFBBDA894"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"EDFFA2C3-0A23-4884-B751-785BE598DFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3F2C29AD-A11F-4A5F-8BB0-8600D5F77E72"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"D2AD66B0-9C99-4F83-80AA-B54E6354ADFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"56DC03E9-D1CF-4273-AF2F-5EB3B8E2D54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4763E504-6974-42C5-B912-3E62A9CC312A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"7A020C2E-1DDB-4737-92D9-B125FFBE007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"EB0D2553-E4E6-454A-80F6-9D014A4710D3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"6.0.15","matchCriteriaId":"0123003E-587B-4EC8-83B6-0C5D87A8AC10"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-032","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-31496","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:08.617","lastModified":"2026-06-17T07:28:32.817","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en pila [CWE-121] en Fortinet FortiManager versión 7.4.0 a 7.4.2 y anteriores a 7.2.5, FortiAnalyzer versión 7.4.0 a 7.4.2 y anteriores a 7.2.5 y FortiAnalyzer-BigData 7.4.0 y anteriores a 7.2.7 permite a un atacante privilegiado ejecutar código o comandos no autorizados a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-12T19:23:57.500319Z","id":"CVE-2024-31496","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"FF6CA5B2-29DE-4FB3-8D7D-D248A593AB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1","versionEndExcluding":"7.2.8","matchCriteriaId":"1A9C272F-2E14-4BC3-B3A3-1EF4E93BDBFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"80598594-A45A-4E69-B968-1DD3DBD30FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"A3F113AF-AA71-466D-9841-15A5243ECFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-098","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-32116","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:08.860","lastModified":"2026-06-17T07:29:18.647","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests."},{"lang":"es","value":"Varias vulnerabilidades de relative path traversal [CWE-23] en Fortinet FortiManager versión 7.4.0 a 7.4.2 y anteriores a 7.2.5, FortiAnalyzer versión 7.4.0 a 7.4.2 y anteriores a 7.2.5 y FortiAnalyzer-BigData versión 7.4.0 y anteriores a 7.2.7 permiten a un atacante privilegiado eliminar archivos del sistema de archivos subyacente a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T18:45:03.925191Z","id":"CVE-2024-32116","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"FF6CA5B2-29DE-4FB3-8D7D-D248A593AB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1","versionEndExcluding":"7.2.8","matchCriteriaId":"1A9C272F-2E14-4BC3-B3A3-1EF4E93BDBFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"80598594-A45A-4E69-B968-1DD3DBD30FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"A3F113AF-AA71-466D-9841-15A5243ECFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-099","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-32117","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:09.073","lastModified":"2026-06-17T07:29:18.813","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and below 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and below 7.2.5 & FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker to read arbitrary files from the underlying system via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una vulnerabilidad de limitación incorrecta de una ruta de acceso a un directorio restringido ('Path Traversal') [CWE-22] en Fortinet FortiManager versión 7.4.0 a 7.4.2 y anteriores 7.2.5, FortiAnalyzer versión 7.4.0 a 7.4.2 y anteriores 7.2.5 y FortiAnalyzer-BigData versión 7.4.0 y anteriores 7.2.7 permite a un atacante privilegiado leer archivos arbitrarios del sistema subyacente a través de solicitudes HTTP o HTTPS manipuladas. "}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-12T20:28:37.757904Z","id":"CVE-2024-32117","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"FF6CA5B2-29DE-4FB3-8D7D-D248A593AB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1","versionEndExcluding":"7.2.8","matchCriteriaId":"1A9C272F-2E14-4BC3-B3A3-1EF4E93BDBFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"80598594-A45A-4E69-B968-1DD3DBD30FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"A3F113AF-AA71-466D-9841-15A5243ECFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-115","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-32118","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:09.287","lastModified":"2026-06-17T07:29:18.983","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer-BigData before 7.4.0 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests."},{"lang":"es","value":"Vulnerabilidades de neutralización incorrecta múltiple de elementos especiales utilizados en un comando del sistema operativo ('Inyección de comando del sistema operativo') [CWE-78] en Fortinet FortiManager versión 7.4.0 a 7.4.2 y anteriores a 7.2.5, Fortinet FortiAnalyzer versión 7.4.0 a 7.4.2 y anteriores a 7.2.5 y Fortinet FortiAnalyzer-BigData anterior a 7.4.0 permiten que un atacante privilegiado autenticado ejecute código o comandos no autorizados a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-12T20:27:19.311899Z","id":"CVE-2024-32118","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"FF6CA5B2-29DE-4FB3-8D7D-D248A593AB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1","versionEndExcluding":"7.2.8","matchCriteriaId":"1A9C272F-2E14-4BC3-B3A3-1EF4E93BDBFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"80598594-A45A-4E69-B968-1DD3DBD30FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"A3F113AF-AA71-466D-9841-15A5243ECFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-116","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-33505","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:09.500","lastModified":"2026-06-17T07:31:52.947","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege via specially crafted http requests"},{"lang":"es","value":"Un desbordamiento de búfer basado en montón en Fortinet FortiAnalyzer versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.5, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14, FortiManager versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.5, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14 permite a un atacante escalar privilegios a través de solicitudes http especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-12T20:54:33.794284Z","id":"CVE-2024-33505","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"F07BE2AB-5F28-4773-B9C3-1D76EA1C2D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.2.7","matchCriteriaId":"DFDD1168-61E8-4974-A1F4-8F262431C399"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.2.7","matchCriteriaId":"A941ABF0-5959-48FE-BFFF-20BB78E02C74"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.3","matchCriteriaId":"7F0FB078-A95E-4AFC-B4A9-A8C43E997A78"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-125","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-33510","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:09.723","lastModified":"2026-06-17T07:31:53.597","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CWE-74] in FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.16 and below; FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below; FortiSASE version 24.2.b SSL-VPN web user interface may allow a remote unauthenticated attacker to perform phishing attempts via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales en la salida utilizada por un componente descendente ('Inyección') [CWE-74] en FortiOS versión 7.4.3 y anteriores, versión 7.2.8 y anteriores, versión 7.0.16 y anteriores; FortiProxy versión 7.4.3 y anteriores, versión 7.2.9 y anteriores, versión 7.0.16 y anteriores; FortiSASE versión 24.2.b La interfaz de usuario web SSL-VPN puede permitir que un atacante remoto no autenticado realice intentos de phishing a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T18:45:31.685889Z","id":"CVE-2024-33510","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-358"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.17","matchCriteriaId":"C98BE382-7A23-4231-9D1B-5D7946848F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"EDFFA2C3-0A23-4884-B751-785BE598DFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3F2C29AD-A11F-4A5F-8BB0-8600D5F77E72"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.9","matchCriteriaId":"AC7395B0-2864-49E3-8B70-935A17EF3162"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-033","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-35274","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:09.993","lastModified":"2026-06-17T07:34:39.807","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker with read write administrative privileges to create non-arbitrary files on a chosen directory via crafted CLI requests."},{"lang":"es","value":"Una vulnerabilidad de limitación incorrecta de una ruta a un directorio restringido ('Path Traversal') [CWE-22] en Fortinet FortiAnalyzer versiones anteriores a 7.4.2, Fortinet FortiManager versiones anteriores a 7.4.2 y Fortinet FortiAnalyzer-BigData versiones 7.4.0 y anteriores a 7.2.7 permite a un atacante privilegiado con privilegios administrativos de lectura y escritura crear archivos no arbitrarios en un directorio elegido a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-12T19:55:03.516906Z","id":"CVE-2024-35274","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.4.3","matchCriteriaId":"452AE920-49A0-4A7C-840C-4AD5510B7AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1","versionEndExcluding":"7.4.1","matchCriteriaId":"35854F9A-432E-4185-A6D2-8C6D59A4CE98"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.4.3","matchCriteriaId":"D7F7A7D1-A7E0-429D-B4F8-BD64A6E2497F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-179","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-36507","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:10.233","lastModified":"2026-06-17T07:36:51.973","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering."},{"lang":"es","value":"Una ruta de búsqueda no confiable en Fortinet FortiClientWindows versiones 7.4.0, versiones 7.2.4 a 7.2.0, versiones 7.0.12 a 7.0.0 permite a un atacante ejecutar código arbitrario a través del secuestro de DLL e ingeniería social."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlientwindows","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:forticlientwindows:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-12T21:28:14.927903Z","id":"CVE-2024-36507","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"CC29F9A2-9ED8-45C6-AC9F-FB4EEAA7AFF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"F06CB11B-0726-4E7A-B257-CB71E2237AA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:windows:*:*","matchCriteriaId":"6B512696-8596-4458-ADC9-24DD3C6C377B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-205","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-36509","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:10.440","lastModified":"2026-06-17T07:36:52.240","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb version 7.6.0, version 7.4.3 and below, version 7.2.10 and below, version 7.0.10 and below, version 6.3.23 and below may allow an authenticated attacker to access the encrypted passwords of other administrators via the \"Log Access Event\" logs page."},{"lang":"es","value":"Una exposición de información confidencial del sistema a una vulnerabilidad de esfera de control no autorizada [CWE-497] en FortiWeb versión 7.6.0, versión 7.4.3 y anteriores, versión 7.2.10 y anteriores, versión 7.0.10 y anteriores, versión 6.3.23 y anteriores puede permitir que un atacante autenticado acceda a las contraseñas cifradas de otros administradores a través de la página de registros \"Evento de acceso al registro\"."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.23","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.6,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-12T20:40:06.803621Z","id":"CVE-2024-36509","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-497"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"7.4.4","matchCriteriaId":"7B0C24E1-3735-4117-8FA1-FB20D23AED9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"28B43375-DA74-4C5F-BAEE-39F312EEF51F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-180","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-36513","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:10.633","lastModified":"2026-06-17T07:36:52.740","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts."},{"lang":"es","value":"Una vulnerabilidad de error de cambio de contexto de privilegios [CWE-270] en FortiClient Windows versión 7.2.4 y anteriores, versión 7.0.12 y anteriores, 6.4 todas las versiones puede permitir que un usuario autenticado aumente sus privilegios a través de scripts de parcheo automático de lua."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlientwindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-12T20:26:43.259237Z","id":"CVE-2024-36513","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-270"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.10","matchCriteriaId":"4C015491-F83B-4569-B0BB-0877C1D89C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"CC29F9A2-9ED8-45C6-AC9F-FB4EEAA7AFF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"F06CB11B-0726-4E7A-B257-CB71E2237AA7"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-144","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40592","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-12T19:15:11.013","lastModified":"2026-06-17T07:46:08.560","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with a malicious package via a race condition during the installation process."},{"lang":"es","value":"Una verificación incorrecta de la vulnerabilidad de la firma criptográfica [CWE-347] en FortiClient MacOS versión 7.4.0, versión 7.2.4 y anteriores, versión 7.0.10 y anteriores, versión 6.4.10 y anteriores puede permitir que un atacante autenticado local intercambie el instalador con un paquete malicioso a través de una condición de ejecución durante el proceso de instalación."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlientmac","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:forticlientmac:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T18:28:42.477120Z","id":"CVE-2024-40592","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.5","matchCriteriaId":"81B7F626-84B5-47A5-959F-735D6250C147"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:macos:*:*","matchCriteriaId":"0A079CA4-D957-402A-B899-31F26A89DF00"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-022","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-47574","sourceIdentifier":"psirt@fortinet.com","published":"2024-11-13T12:15:16.313","lastModified":"2026-06-17T07:57:20.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages."},{"lang":"es","value":"Una omisión de autenticación que utiliza una ruta o canal alternativo en Fortinet FortiClientWindows versión 7.4.0, versiones 7.2.4 a 7.2.0, versiones 7.0.12 a 7.0.0 y 6.4.10 a 6.4.0 permite a un atacante con pocos privilegios ejecutar código arbitrario con altos privilegios a través de mensajes de canalización con nombre falsificados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fortinet","product":"forticlientwindows","defaultStatus":"unknown","cpes":["cpe:2.3:a:fortinet:forticlientwindows:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T14:40:12.257561Z","id":"CVE-2024-47574","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.13","matchCriteriaId":"5FE64D7B-5E5D-4E55-85BD-5FA14F853E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"F06CB11B-0726-4E7A-B257-CB71E2237AA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:windows:*:*","matchCriteriaId":"6B512696-8596-4458-ADC9-24DD3C6C377B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-199","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-34990","sourceIdentifier":"psirt@fortinet.com","published":"2024-12-18T13:15:05.547","lastModified":"2026-06-17T06:04:13.917","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted web requests."},{"lang":"es","value":"Path traversal relativo en Fortinet FortiWLM versión 8.6.0 a 8.6.5 y 8.5.0 a 8.5.4 permite a un atacante ejecutar código o comandos no autorizados a través de solicitudes web especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLM","defaultStatus":"unaffected","versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.5","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-19T00:00:00+00:00","id":"CVE-2023-34990","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndExcluding":"8.5.5","matchCriteriaId":"03C48FF6-3BAA-49AF-AF2D-3BC1D395BFDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlm:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.6","matchCriteriaId":"4D875C08-1321-4343-92B3-36B12EA44A61"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-144","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-48889","sourceIdentifier":"psirt@fortinet.com","published":"2024-12-18T13:15:06.463","lastModified":"2026-06-17T07:58:58.617","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManager version 7.6.0, version 7.4.4 and below, version 7.2.7 and below, version 7.0.12 and below, version 6.4.14 and below and FortiManager Cloud version 7.4.4 and below, version 7.2.7 to 7.2.1, version 7.0.12 to 7.0.1 may allow an authenticated remote attacker to execute unauthorized code via FGFM crafted requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') [CWE-78] en FortiManager versión 7.6.0, versión 7.4.4 y anteriores, versión 7.2.7 y anteriores, versión 7.0.12 y anteriores, versión 6.4.14 y anteriores y FortiManager Cloud versión 7.4.4 y anteriores, versión 7.2.7 a 7.2.1, versión 7.0.12 a 7.0.1 puede permitir que un atacante remoto autenticado ejecute código no autorizado a través de solicitudes manipuladas por FGFM."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.3","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.5","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.10","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-20T04:55:50.284489Z","id":"CVE-2024-48889","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.10","versionEndExcluding":"6.4.15","matchCriteriaId":"1991ADC0-7D04-4384-90B5-868B0008E3B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.5","versionEndExcluding":"7.0.13","matchCriteriaId":"A0B2B047-143D-4D7F-8838-0CB83647CC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.3","versionEndExcluding":"7.2.8","matchCriteriaId":"8B3C4C96-2375-4C7F-90CF-D6D89866DD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"0666260A-1327-4C43-A841-04FB4459449C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0141F06A-F5FE-4DF3-B60E-DD76A1AD8A56"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.0.13","matchCriteriaId":"29B3A5F2-3121-4902-BBB6-8B4D07767F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.8","matchCriteriaId":"E3A26BF0-DF69-42F6-B9D8-D3BEE3DD352C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.5","matchCriteriaId":"6E0BCF26-B311-4FFF-866B-3DCA14A26268"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-425","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-50570","sourceIdentifier":"psirt@fortinet.com","published":"2024-12-18T13:15:06.723","lastModified":"2026-06-17T08:04:43.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13 and FortiClientLinux 7.4.0 through 7.4.2, 7.2.0 through 7.2.7, 7.0.0 through 7.0.13 may permit a local authenticated user to retrieve VPN password via memory dump, due to JavaScript's garbage collector"},{"lang":"es","value":"Una vulnerabilidad de almacenamiento de información confidencial en texto plano [CWE-312] en FortiClientWindows 7.4.0 a 7.4.1, 7.2.0 a 7.2.6, 7.0.0 a 7.0.13 y FortiClientLinux 7.4.0 a 7.4.2, 7.2.0 a 7.2.7, 7.0.0 a 7.0.13 puede permitir que un usuario autenticado local recupere la contraseña de VPN a través de un volcado de memoria, debido al recolector de elementos no utilizados de JavaScript."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientLinux","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.6,"impactScore":4.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-18T14:30:59.618705Z","id":"CVE-2024-50570","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-312"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"969A2057-A61A-42B4-AD82-3F3F83212DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A5E1E434-C7FC-4BAC-BD18-251C564C35C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"D0671451-618C-435A-8E35-49E155CEAD78"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"B6FA8457-FC36-4561-83CE-C28E900C01B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"FA4908DD-695F-4C76-88D2-601D88C4D59F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-278","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-12819","sourceIdentifier":"psirt@fortinet.com","published":"2024-12-19T08:15:11.770","lastModified":"2026-06-17T02:52:22.277","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 and earlier may allow a remote attacker with valid SSL VPN credentials to crash the SSL VPN daemon by sending a large LCP packet, when tunnel mode is enabled. Arbitrary code execution may be theoretically possible, albeit practically very difficult to achieve in this context"},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer en el montón durante el procesamiento de mensajes del Protocolo de control de enlaces en las versiones 5.6.12, 6.0.10, 6.2.4 y 6.4.1 y anteriores de FortiGate puede permitir que un atacante remoto con credenciales de VPN SSL válidas bloquee el daemon de VPN SSL mediante el envío de un paquete LCP de gran tamaño cuando el modo túnel está habilitado. La ejecución de código arbitrario puede ser teóricamente posible, aunque en la práctica es muy difícil de lograr en este contexto"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-20T16:45:10.916317Z","id":"CVE-2020-12819","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"5.6.13","matchCriteriaId":"8C8DACBF-C9D5-4898-8294-DB887A28A9C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.11","matchCriteriaId":"D44B5E8F-6093-4E84-9197-4530032E5B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.5","matchCriteriaId":"B59A39D6-9494-4273-8348-1078A77DD796"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"FECE2DC5-CFCC-4BA9-B416-4EB2C1E4D9BB"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-20-082","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26093","sourceIdentifier":"psirt@fortinet.com","published":"2024-12-19T08:15:14.717","lastModified":"2026-06-17T03:42:51.020","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command."},{"lang":"es","value":"Una vulnerabilidad de acceso a un puntero no inicializado (CWE-824) en FortiWLC versiones 8.6.0, 8.5.3 y anteriores puede permitir que un atacante local y autenticado bloquee el punto de acceso administrado por el controlador mediante la ejecución de un comando CLI manipulado específicamente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLC","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiwlc:8.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.0.6:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.3","versionType":"semver","status":"affected"},{"version":"8.4.4","lessThanOrEqual":"8.4.8","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThanOrEqual":"8.4.2","versionType":"semver","status":"affected"},{"version":"8.3.0","lessThanOrEqual":"8.3.3","versionType":"semver","status":"affected"},{"version":"8.2.4","lessThanOrEqual":"8.2.7","versionType":"semver","status":"affected"},{"version":"8.1.2","lessThanOrEqual":"8.1.3","versionType":"semver","status":"affected"},{"version":"8.0.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":4.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-20T16:45:09.690266Z","id":"CVE-2021-26093","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-824"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.6","versionEndExcluding":"8.6.3","matchCriteriaId":"860117DD-3D1F-4460-8A21-F51509DDB67B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-21-002","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-12820","sourceIdentifier":"psirt@fortinet.com","published":"2024-12-19T11:15:05.700","lastModified":"2026-06-17T02:52:22.410","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and below may allow a remote attacker authenticated to the SSL VPN to crash the FortiClient NAC daemon (fcnacd) and potentially execute arbitrary code via requesting a large FortiClient file name. We are not aware of proof of concept code successfully achieving the latter."},{"lang":"es","value":"En una configuración no predeterminada, un desbordamiento de búfer basado en pila en FortiOS versión 6.0.10 y anteriores, versión 5.6.12 y anteriores puede permitir que un atacante remoto autenticado en la VPN SSL bloquee el daemon NAC de FortiClient (fcnacd) y potencialmente ejecute código arbitrario mediante la solicitud de un nombre de archivo FortiClient grande. No tenemos conocimiento de ningún código de prueba de concepto que logre esto último con éxito."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-20T17:24:49.607607Z","id":"CVE-2020-12820","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"5.6.13","matchCriteriaId":"8C8DACBF-C9D5-4898-8294-DB887A28A9C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.11","matchCriteriaId":"D44B5E8F-6093-4E84-9197-4530032E5B5A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-20-083","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-15934","sourceIdentifier":"psirt@fortinet.com","published":"2024-12-19T11:15:06.930","lastModified":"2026-06-17T02:57:25.900","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and below, version 6.4.0. may allow local users to elevate their privileges to root by creating a malicious script or program on the target machine."},{"lang":"es","value":"Una vulnerabilidad de ejecución con privilegios innecesarios en el motor VCM de FortiClient para Linux versiones 6.2.7 y anteriores, versión 6.4.0, puede permitir que usuarios locales eleven sus privilegios a superusuario mediante la creación de un script o programa malicioso en la máquina de destino."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientLinux","defaultStatus":"unaffected","versions":[{"version":"6.4.0","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.8","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-20T17:22:49.806588Z","id":"CVE-2020-15934","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.8","matchCriteriaId":"49F1914E-5D71-4DF6-89D7-D55C5A2CD54E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:6.4.0:*:*:*:*:linux:*:*","matchCriteriaId":"4ED4EE61-7872-4B1F-B0E1-35016FD4E547"}]}]}],"references":[{"url":"https://www.fortiguard.com/psirt/FG-IR-20-110","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26115","sourceIdentifier":"psirt@fortinet.com","published":"2024-12-19T11:15:07.103","lastModified":"2026-06-17T03:42:53.310","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection (CWE-78) vulnerability in FortiWAN Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command."},{"lang":"es","value":"Una vulnerabilidad de inyección de comando del sistema operativo (CWE-78) en la interfaz de línea de comandos de FortiWAN versión 4.5.7 y anteriores puede permitir que un atacante local, autenticado y sin privilegios escale sus privilegios a superusuario mediante la ejecución de un comando especialmente manipulado.Una vulnerabilidad de inyección de comando del sistema operativo (CWE-78) en la interfaz de línea de comandos de FortiWAN puede permitir que un atacante local, autenticado y sin privilegios escale sus privilegios a superusuario mediante la ejecución de un comando especialmente manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWAN","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThanOrEqual":"4.5.7","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.1","versionType":"semver","status":"affected"},{"version":"4.3.0","lessThanOrEqual":"4.3.1","versionType":"semver","status":"affected"},{"version":"4.2.5","lessThanOrEqual":"4.2.7","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.2","versionType":"semver","status":"affected"},{"version":"4.1.1","lessThanOrEqual":"4.1.3","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-20T17:22:02.430429Z","id":"CVE-2021-26115","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionEndExcluding":"4.5.8","matchCriteriaId":"7627535D-1D56-4AB9-9927-FAAC83C3C485"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-21-069","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32589","sourceIdentifier":"psirt@fortinet.com","published":"2024-12-19T13:15:05.707","lastModified":"2026-06-17T03:53:13.620","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.3.11, version 5.2.10 to 5.2.4 fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a specifically crafted request to the fgfm port of the targeted device."},{"lang":"es","value":"Una vulnerabilidad de Use After Free (CWE-416) en FortiManager versión 7.0.0, versión 6.4.5 y anteriores, versión 6.2.7 y anteriores, versión 6.0.10 y anteriores, versión 5.6.10 y anteriores, versión 5.4.7 y anteriores, versión 5.2.10 y anteriores, versión 5.0.12 y anteriores y FortiAnalyzer versión 7.0.0, versión 6.4.5 y anteriores, versión 6.2.7 y anteriores, versión 6.0.10 y anteriores, versión 5.6.10 y anteriores, versión 5.4.7 y anteriores, versión 5.3.11, versión 5.2.10 a 5.2.4 del daemon fgfmsd puede permitir que un atacante remoto no autenticado ejecute código no autorizado como superusuario mediante el envío de una solicitud específicamente manipulada al puerto fgfm del dispositivo de destino."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.10","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.10","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.3.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:5.2.4:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.10","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.7","versionType":"semver","status":"affected"},{"version":"5.3.11","status":"affected"},{"version":"5.2.4","lessThanOrEqual":"5.2.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-20T21:54:22.696432Z","id":"CVE-2021-32589","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.4","versionEndExcluding":"5.6.11","matchCriteriaId":"DC678658-46C6-49D6-853F-488EB4C2950F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.11","matchCriteriaId":"093F543B-6709-4B77-87A6-7989B3EF1B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.8","matchCriteriaId":"E0F1A4F4-3123-4032-A82A-A4E1E2DFD2EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"23A36459-01FE-4ABC-8C5B-783408B43E22"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D7DC87E0-0C9F-4E65-B96E-7E91F71764AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.6.11","matchCriteriaId":"E17DB3C5-AB61-49E4-9281-27F41B565FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.11","matchCriteriaId":"A817FD04-EEF8-40C9-AF7F-B9C1458226F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.8","matchCriteriaId":"C4A894BD-7AB4-4F10-819A-4DE3F9C961CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"F3FC7F19-2794-4E8E-A93A-4031D94D2A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8A4E6379-A79E-4135-BAF1-D53E8F56798B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"5.3.7","matchCriteriaId":"F3AF186D-F8CF-4050-B41E-FE25825C7834"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.6","matchCriteriaId":"08ECB3CD-EAA3-488F-9711-85F88B80E2F1"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-21-067","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26102","sourceIdentifier":"psirt@fortinet.com","published":"2024-12-19T14:15:05.380","lastModified":"2026-06-17T03:42:51.810","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to its default value."},{"lang":"es","value":"Una vulnerabilidad de path traversal relativo (CWE-23) en FortiWAN versión 4.5.7 y anteriores, 4.4 y todas las versiones puede permitir que un atacante remoto no autenticado elimine archivos del sistema mediante el envío de una solicitud POST manipulada. En particular, la eliminación de archivos de configuración específicos restablecerá la contraseña de administrador a su valor predeterminado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWAN","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThanOrEqual":"4.5.7","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-19T15:14:52.995354Z","id":"CVE-2021-26102","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-305"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwan:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.5.8","matchCriteriaId":"C177EBEF-63F1-47E4-9DBB-5424C6AFCB5A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-21-048","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-37931","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:26.623","lastModified":"2026-06-17T06:08:55.817","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-88] in FortiVoice Entreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to perform a blind sql injection attack via sending crafted HTTP or HTTPS requests"},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL ('inyección SQL') [CWE-88] en FortiVoice Entreprise versión 7.0.0 a 7.0.1 y anteriores a 6.4.8 permite que un atacante autenticado realice un ataque de inyección Blind SQL mediante el envío de solicitudes HTTP o HTTPS manipulado"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T14:20:56.927727Z","id":"CVE-2023-37931","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.9","matchCriteriaId":"C97B8181-C602-4E70-B3EA-CBE1FA62A220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"5F6B6495-7CF4-4E5A-8497-9AF6D81C083B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-220","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-37936","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:26.790","lastModified":"2026-06-17T06:08:56.590","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via crafted requests."},{"lang":"es","value":"El uso de una clave criptográfica codificada en Fortinet FortiSwitch versión 7.4.0 y 7.2.0 a 7.2.5 y 7.0.0 a 7.0.7 y 6.4.0 a 6.4.13 y 6.2.0 a 6.2.7 y 6.0.0 a 6.0.7 permite a un atacante ejecutar código o comandos no autorizados a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitch","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitch:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.13","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:18:43.351489Z","id":"CVE-2023-37936","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.8","matchCriteriaId":"D598B891-A763-405E-936F-3BD50BAAF79A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.14","matchCriteriaId":"D2AD0CC1-18B1-43FF-8D4F-ED2B20967F02"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"2BBD731D-302D-4E1B-9155-208D3917EA39"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"CF62985F-6E9F-4AFA-B7BE-34DAF8969DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"19F02C5D-A0DE-47C9-A4B4-4C9BB7E50244"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-260","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-37937","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:26.940","lastModified":"2026-06-17T06:08:56.730","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via the FortiSwitch CLI."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiSwitch versión 7.4.0 y 7.2.0 a 7.2.5 y 7.0.0 a 7.0.7 y 6.4.0 a 6.4.13 y 6.2.0 a 6.2.7 y 6.0.0 a 6.0.7 permite a un atacante ejecutar código o comandos no autorizados a través de la CLI de FortiSwitch."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitch","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitch:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.13","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:36.114892Z","id":"CVE-2023-37937","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.8","matchCriteriaId":"D598B891-A763-405E-936F-3BD50BAAF79A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.14","matchCriteriaId":"D2AD0CC1-18B1-43FF-8D4F-ED2B20967F02"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"2BBD731D-302D-4E1B-9155-208D3917EA39"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"CF62985F-6E9F-4AFA-B7BE-34DAF8969DFA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"19F02C5D-A0DE-47C9-A4B4-4C9BB7E50244"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-258","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-42785","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:27.083","lastModified":"2026-06-17T06:24:29.873","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows attacker to trigger a denial of service via a crafted http request."},{"lang":"es","value":"Una desreferencia de puntero nulo en las versiones de FortiOS 7.4.0 a 7.4.1, 7.2.0 a 7.2.5, 7.0 todas las versiones, 6.4 todas las versiones, 6.2 todas las versiones y 6.0 todas las versiones permite a un atacante activar una denegación de servicio a través de una solicitud http manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.16","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:23.669911Z","id":"CVE-2023-42785","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.2.6","matchCriteriaId":"C4D18D6E-AD93-4183-B9A9-458E791ED126"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"4316C2EA-3D6E-4A0C-B81D-ADCE040E03E0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-293","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-42786","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:27.237","lastModified":"2026-06-17T06:24:30.050","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows attacker to trigger a denial of service via a crafted http request."},{"lang":"es","value":"Una desreferencia de puntero nulo en las versiones de FortiOS 7.4.0 a 7.4.1, 7.2.0 a 7.2.5, 7.0 todas las versiones, 6.4 todas las versiones, 6.2 todas las versiones y 6.0 todas las versiones permite a un atacante activar una denegación de servicio a través de una solicitud http manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.16","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:17.589625Z","id":"CVE-2023-42786","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.2.6","matchCriteriaId":"C4D18D6E-AD93-4183-B9A9-458E791ED126"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"4316C2EA-3D6E-4A0C-B81D-ADCE040E03E0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-293","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-46715","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:27.387","lastModified":"2026-06-17T06:31:24.293","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An origin validation error [CWE-346] vulnerability in Fortinet FortiOS  IPSec VPN version 7.4.0 through 7.4.1 and version 7.2.6 and below allows an authenticated IPSec VPN user with dynamic IP addressing to send (but not receive) packets spoofing the IP of another user via crafted network packets."},{"lang":"es","value":"Una vulnerabilidad de error de validación de origen [CWE-346] en Fortinet FortiOS IPSec VPN versión 7.4.0 a 7.4.1 y versión 7.2.6 y anteriores permite que un usuario de IPSec VPN autenticado con dirección IP dinámica envíe (pero no reciba) paquetes que falsifican la IP de otro usuario a través de paquetes de red manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:14.692340Z","id":"CVE-2023-46715","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-346"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.4.2","matchCriteriaId":"D551134C-9EFE-42A3-8DE1-AB84D115D748"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-407","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-21758","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:28.597","lastModified":"2026-06-17T07:10:06.373","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0 through 7.4.1 may allow a privileged user to execute arbitrary code via specially crafted CLI commands, provided the user is able to evade FortiWeb stack protections."},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en las versiones 7.2.0 a 7.2.7 y 7.4.0 a 7.4.1 de Fortinet FortiWeb puede permitir que un usuario privilegiado ejecute código arbitrario a través de comandos CLI especialmente manipulados, siempre que el usuario pueda evadir las protecciones de pila de FortiWeb."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T14:31:01.390000Z","id":"CVE-2024-21758","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"AA10A5FC-77B4-4FEE-AB50-EF76450268A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"4E80E104-6950-4916-9036-7A980E0EBF90"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-458","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-23106","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:28.747","lastModified":"2026-06-17T07:12:02.560","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 allows an unauthenticated attacker to try a brute force attack against the FortiClientEMS console via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una restricción incorrecta de intentos de autenticación excesivos [CWE-307] en FortiClientEMS versión 7.2.0 a 7.2.4 y anteriores a 7.0.10 permite que un atacante no autenticado intente un ataque de fuerza bruta contra la consola FortiClientEMS a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T14:18:35.297797Z","id":"CVE-2024-23106","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"46359866-6D0D-4479-A1E6-96EB1753DF6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"F67F4416-C237-41A2-B7A4-2541EE60C972"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"1E954728-0E7F-4BB9-9E82-43C6DE61408C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"C9FA0AB2-209D-4C5A-86E8-D5F88816CD60"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-476","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-26012","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:28.893","lastModified":"2026-06-17T07:16:55.390","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiAP-S 6.2 all verisons, and 6.4.0 through 6.4.9, FortiAP-W2 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.3, and 7.4.0 through 7.4.2, FortiAP 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.3, and 7.4.0 through 7.4.2 allow a local authenticated attacker to execute unauthorized code via the CLI."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiAP-S 6.2 todas las versiones y 6.4.0 a 6.4.9, FortiAP-W2 6.4 todas las versiones, 7.0 todas las versiones, 7.2.0 a 7.2.3 y 7.4.0 a 7.4.2, FortiAP 6.4 todas las versiones, 7.0 todas las versiones, 7.2.0 a 7.2.3 y 7.4.0 a 7.4.2 permite que un atacante autenticado local ejecute código no autorizado a través de la CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAP-S","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiap-s:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-s:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAP-W2","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAP","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiap:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.3:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.3","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-15T14:56:09.448550Z","id":"CVE-2024-26012","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.2.4","matchCriteriaId":"D2447B21-5F51-4AB1-BE8A-3B7A982F0595"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"7DF362E9-2991-4237-ABC3-4AFE64456118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-s:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.4.10","matchCriteriaId":"C00C0CE7-F554-4AF0-AA5F-784A3B910401"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.4","matchCriteriaId":"59C5655C-992C-40DA-8EC3-EC9D1F202B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"6521DC83-31B5-4CEF-989B-2D86979140C2"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-405","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-27778","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:29.053","lastModified":"2026-06-17T07:20:16.777","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0.5 through 3.0.7 allows an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo [CWE-78] en Fortinet FortiSandbox versión 4.4.0 a 4.4.4, 4.2.0 a 4.2.6 y anteriores a 4.0.4 permite que un atacante autenticado con al menos permiso de solo lectura ejecute comandos no autorizados a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.4","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.4","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.5","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:30.514916Z","id":"CVE-2024-27778","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.5","versionEndExcluding":"4.0.5","matchCriteriaId":"9B6BB3F7-A2A0-4D73-BEB6-D831C9C3CAD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.7","matchCriteriaId":"958CF981-06BE-44FF-B5CF-156649D86232"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.5","matchCriteriaId":"2C77A903-42B3-41D3-BDC6-E138679B5400"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-061","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-32115","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:29.200","lastModified":"2026-06-17T07:29:18.520","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager  version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una vulnerabilidad relativa Path Traversal [CWE-23] en Fortinet FortiManager versión 7.4.0 a 7.4.2 y anteriores a 7.2.5 permite a un atacante privilegiado eliminar archivos del sistema de archivos subyacente a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T14:15:51.838520Z","id":"CVE-2024-32115","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.6","matchCriteriaId":"F4DCACA3-788F-475F-B671-E35F232386C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-097","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-33502","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:29.360","lastModified":"2026-06-17T07:31:52.490","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.12 and 6.4.0 through 6.4.14 and 6.2.0 through 6.2.12 and 6.0.0 through 6.0.12 allows attacker to execute unauthorized code or commands via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una limitación incorrecta de una ruta de acceso a un directorio restringido ('Path Traversal') en Fortinet FortiManager, FortiAnalyzer versiones 7.4.0 a 7.4.2 y 7.2.0 a 7.2.5 y 7.0.0 a 7.0.12 y 6.4.0 a 6.4.14 y 6.2.0 a 6.2.12 y 6.0.0 a 6.0.12 permite a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-15T14:54:07.239273Z","id":"CVE-2024-33502","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.2.6","matchCriteriaId":"6B90F8DA-2A6C-4BA3-865B-22AF3BEC94EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.2.6","matchCriteriaId":"4930F5C2-53A3-4174-A085-3DECED601442"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-143","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-33503","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:29.517","lastModified":"2026-07-08T14:16:51.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions allows attacker to escalation of privilege via specific shell commands"},{"lang":"es","value":"Una gestión de privilegios incorrecta en Fortinet FortiManager versión 7.4.0 a 7.4.3, 7.2.0 a 7.2.5, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14, FortiAnalyzer versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.5, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14 permite a los atacantes escalar privilegios a través de comandos de shell específicos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.1","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:33.256242Z","id":"CVE-2024-33503","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-266"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"F07BE2AB-5F28-4773-B9C3-1D76EA1C2D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"E6F162A7-0D01-43E0-99D8-D7B87B080853"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.2.7","matchCriteriaId":"38BFF3B9-3927-4B15-A573-4EDB20362841"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.3","matchCriteriaId":"40C3665B-3E49-4D0C-B924-266D49F1E510"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"71CC4AA3-04CC-49CA-A012-E28C4D1F11DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3AE9CAFD-5D5B-4799-8690-624225963595"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.2.7","matchCriteriaId":"75DA0ED6-C606-4763-A7B0-575F8061237A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"164DEDC3-B1C0-42AC-9ADB-CE03CF6A71CC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-127","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-35273","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:29.663","lastModified":"2026-06-17T07:34:39.697","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests."},{"lang":"es","value":"Una escritura fuera de los límites en Fortinet FortiManager versión 7.4.0 a 7.4.2 y FortiAnalyzer versión 7.4.0 a 7.4.2 permite a un atacante escalar privilegios a través de solicitudes http especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:41.659053Z","id":"CVE-2024-35273","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"E6F162A7-0D01-43E0-99D8-D7B87B080853"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.3","matchCriteriaId":"40C3665B-3E49-4D0C-B924-266D49F1E510"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.3","matchCriteriaId":"7F0FB078-A95E-4AFC-B4A9-A8C43E997A78"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-106","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-35275","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:29.817","lastModified":"2026-06-17T07:34:39.973","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando sql ('inyección sql') en Fortinet FortiAnalyzer versión 7.4.0 a 7.4.2, FortiManager versión 7.4.0 a 7.4.2 permite a un atacante escalar privilegios a través de solicitudes http especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:44.327500Z","id":"CVE-2024-35275","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"E6F162A7-0D01-43E0-99D8-D7B87B080853"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.3","matchCriteriaId":"40C3665B-3E49-4D0C-B924-266D49F1E510"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.3","matchCriteriaId":"7F0FB078-A95E-4AFC-B4A9-A8C43E997A78"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-091","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-35276","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:29.973","lastModified":"2026-07-08T14:16:52.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer 6.4.0 through 6.4.14, FortiAnalyzer Cloud 7.4.1 through 7.4.3, FortiAnalyzer Cloud 7.2.1 through 7.2.5, FortiAnalyzer Cloud 7.0.1 through 7.0.11, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0.1 through 7.0.11, FortiManager Cloud 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets."},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en Fortinet FortiAnalyzer versiones 7.4.0 a 7.4.3, 7.2.0 a 7.2.5, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14, FortiManager versiones 7.4.0 a 7.4.3, 7.2.0 a 7.2.5, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14, FortiManager Cloud versiones 7.4.1 a 7.4.3, 7.2.1 a 7.2.5, 7.0.1 a 7.0.11, 6.4.1 a 6.4.7, FortiAnalyzer Cloud versiones 7.4.1 a 7.4.3, 7.2.1 a 7.2.5, 7.0.1 ...2, 6.4.0 a 6.4.14, FortiManager Cloud versiones 7.4.1 a 7.4.3, 7.2.1 a 7.2.5, 7.0.1 a 7.0.12, 7.0.11, 6.4.1 a 6.4.7 permite a los atacantes ejecutar código o comandos no autorizados a través de paquetes especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.1","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.1","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:20.448933Z","id":"CVE-2024-35276","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"34F71CF0-4C81-4261-BDA8-30287969D137"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"BFAF2532-DF9C-458E-B69B-59C29507F775"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"6FCEF6EE-A923-4DCE-A225-C6D1FB0123E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"E6F162A7-0D01-43E0-99D8-D7B87B080853"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.0.12","matchCriteriaId":"DD54E27E-172A-4F2D-A09A-862C4B5F4957"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.6","matchCriteriaId":"F8614C7F-FC4D-4686-9E7A-071830318813"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"6EA0888C-2D95-46ED-9BA9-F99072C02FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"D2AD66B0-9C99-4F83-80AA-B54E6354ADFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"37456E27-0EE2-4AF8-B92F-A5284FEC0409"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"605795FE-4D3E-48D4-B2E6-AED4C79B405F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3AE9CAFD-5D5B-4799-8690-624225963595"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.0.12","matchCriteriaId":"CDAE920D-C7A3-47B2-A737-1ECB2C9AFBEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.6","matchCriteriaId":"482363A8-9BE6-46F1-8795-6268F6B84FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"164DEDC3-B1C0-42AC-9ADB-CE03CF6A71CC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-165","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-35277","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:30.130","lastModified":"2026-06-17T07:34:40.260","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to access to the configuration of the managed devices by sending specifically crafted packets"},{"lang":"es","value":"La falta de autenticación para una función crítica en Fortinet FortiPortal versión 6.0.0 a 6.0.15, FortiManager versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.5, 7.0.0 a 7.0.12, 6.4.0 a 6.4.14 permite a un atacante acceder a la configuración de los dispositivos administrados mediante el envío específico de paquetes manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","baseScore":8.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":4.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-15T14:56:46.600702Z","id":"CVE-2024-35277","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"D2AD66B0-9C99-4F83-80AA-B54E6354ADFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"37456E27-0EE2-4AF8-B92F-A5284FEC0409"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"605795FE-4D3E-48D4-B2E6-AED4C79B405F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.0.13","matchCriteriaId":"29B3A5F2-3121-4902-BBB6-8B4D07767F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.7","matchCriteriaId":"4CD97EEF-BD2E-4442-A3E8-9C9489439404"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.3","matchCriteriaId":"7F0FB078-A95E-4AFC-B4A9-A8C43E997A78"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-135","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-35278","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:30.280","lastModified":"2026-06-17T07:34:40.373","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.2.4 through 7.2.0 and 7.0.0 through 7.2.8 may allow an authenticated attacker to view the SQL query being run server-side when submitting an HTTP request, via including special elements in said request."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando sql ('sql injection') en Fortinet FortiPortal versiones 7.2.4 a 7.2.0 y 7.0.0 a 7.2.8 puede permitir que un atacante autenticado vea la consulta SQL que se ejecuta en el servidor al enviar una solicitud HTTP, a través de elementos especiales incluida en dicha solicitud."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T16:51:08.147833Z","id":"CVE-2024-35278","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"EB9E106C-E997-40D4-B368-1E9554E5A9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"324378D9-B66F-490A-A3D6-96C05E13F0A0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-086","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-36504","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:30.433","lastModified":"2026-06-17T07:36:51.630","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6.4 all versions may allow an authenticated attacker to perform a denial of service on the SSLVPN web portal via a specially crafted URL."},{"lang":"es","value":"Una vulnerabilidad de lectura fuera de los límites [CWE-125] en las versiones 7.4.0 a 7.4.4, 7.2.0 a 7.2.8, 7.0 todas las versiones y 6.4 todas las versiones del portal web FortiOS SSLVPN puede permitir que un atacante autenticado realice una denegación de servicio en el portal web SSLVPN a través de una URL especialmente manipulada ."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T14:29:08.113154Z","id":"CVE-2024-36504","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.9","matchCriteriaId":"BA3C4552-7B3E-4BDC-ABBD-DB228D968B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-473","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-36506","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:30.590","lastModified":"2026-06-17T07:36:51.860","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection."},{"lang":"es","value":"Una verificación incorrecta de la fuente de una vulnerabilidad del canal de comunicación [CWE-940] en FortiClientEMS 7.4.0, 7.2.0 a 7.2.4, 7.0 todas las versiones, 6.4 todas las versiones puede permitir que un atacante remoto omita la función de host confiable a través de una conexión de sesión."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-15T14:55:35.373852Z","id":"CVE-2024-36506","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-940"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.5","matchCriteriaId":"1780B964-3C24-4EE6-BA95-D119B2B3A28F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"22665641-9DD6-42BB-81E2-52E03153E114"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.5","matchCriteriaId":"8BEBCDC0-C295-4A79-9912-E9759CD415A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems_cloud:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A6871774-9E51-4E60-9C0E-F10DC7971651"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-078","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-36510","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:30.737","lastModified":"2026-06-17T07:36:52.360","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid users via observing login request responses."},{"lang":"es","value":"Una vulnerabilidad de discrepancia de respuesta observable [CWE-204] en FortiClientEMS 7.4.0, 7.2.0 a 7.2.4, 7.0 todas las versiones, y FortiSOAR 7.5.0, 7.4.0 a 7.4.4, 7.3.0 a 7.3.2, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones puede permitir que un atacante no autenticado enumere usuarios válidos mediante la observación de las respuestas de las solicitudes de inicio de sesión."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.5.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.3","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-15T14:50:55.718822Z","id":"CVE-2024-36510","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-204"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.5","matchCriteriaId":"D79D035D-4F5F-439B-82C3-C640086C7B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"22665641-9DD6-42BB-81E2-52E03153E114"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.3.3","matchCriteriaId":"3ECE9A3F-7C5F-4A34-ABB2-CD4E1997CE0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"265BEE92-3FBB-4033-A77A-E112C9DE9862"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DCA9F69D-D91E-4450-97BD-D9566EA7B649"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-071","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-36512","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:30.880","lastModified":"2026-06-17T07:36:52.607","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer 7.4.0 through 7.4.3 and 7.2.0 through 7.2.5 and 7.0.2 through 7.0.12 and 6.2.10 through 6.2.13 allows attacker to execute unauthorized code or commands via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una limitación incorrecta de una ruta de acceso a un directorio restringido ('Path Traversal') en Fortinet FortiManager, FortiAnalyzer 7.4.0 a 7.4.3 y 7.2.0 a 7.2.5 y 7.0.2 a 7.0.12 y 6.2.10 a 6.2.13 permite a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.2","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.2.10","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.2","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.2.10","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:47.023639Z","id":"CVE-2024-36512","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.10","versionEndExcluding":"7.0.13","matchCriteriaId":"B2B9910D-81A2-4146-9EB3-C7D949FB2C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"6FCEF6EE-A923-4DCE-A225-C6D1FB0123E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"E6F162A7-0D01-43E0-99D8-D7B87B080853"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.10","versionEndExcluding":"7.0.13","matchCriteriaId":"A0B65AA1-2215-4D35-B3BF-F362EE66014B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"605795FE-4D3E-48D4-B2E6-AED4C79B405F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3AE9CAFD-5D5B-4799-8690-624225963595"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-152","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40587","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:31.027","lastModified":"2026-06-17T07:46:08.017","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiVoice version 7.0.0 through 7.0.4 and before 6.4.9 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('Inyección de comando del sistema operativo') [CWE-78] en Fortinet FortiVoice versión 7.0.0 a 7.0.4 y anteriores a 6.4.9 permite que un atacante privilegiado autenticado ejecute código o comandos no autorizados a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:24.715853Z","id":"CVE-2024-40587","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.10","matchCriteriaId":"BC0CF97D-D86C-4D83-B787-1E251FE73995"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"C22B8401-8893-474D-AB9E-42C3F2EF79CE"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-304","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45326","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:31.183","lastModified":"2026-06-17T07:54:02.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiDeceptor versión 6.0.0, versión 5.3.3 y anteriores, versión 5.2.1 y anteriores, versión 5.1.0, versión 5.0.0 puede permitir que un atacante autenticado sin privilegios realice operaciones en el dispositivo de administración central a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDeceptor","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortideceptor:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.4","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.2","versionType":"semver","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:14:59.021895Z","id":"CVE-2024-45326","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"6.0.1","matchCriteriaId":"19ED7397-1BD2-4C31-AA38-044A316CDD93"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-285","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-46664","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:31.330","lastModified":"2026-06-17T07:55:41.030","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una Path Traversal relativa en Fortinet FortiRecorder [CWE-23] versión 7.2.0 a 7.2.1 y anteriores a 7.0.4 permite a un atacante privilegiado leer archivos del sistema de archivos subyacente a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:05.621685Z","id":"CVE-2024-46664","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.5","matchCriteriaId":"152C9FCA-912A-4CE5-A3F7-3F3DE0F2825C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"C0B0D078-2F52-46B4-B9C0-162447828E1B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-310","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-46665","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:31.490","lastModified":"2026-06-17T07:55:41.140","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests."},{"lang":"es","value":"Una vulnerabilidad de inserción de información confidencial en datos enviados [CWE-201] en FortiOS 7.6.0, 7.4.0 a 7.4.4 puede permitir que un atacante en una posición intermedia recupere el secreto compartido del servidor de contabilidad RADIUS mediante la interceptación de solicitudes de contabilidad."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:36.897456Z","id":"CVE-2024-46665","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-201"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-326","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-46666","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:31.647","lastModified":"2026-06-17T07:55:41.253","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions 7.4.4 through 7.4.0, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow a remote unauthenticated attacker to prevent access to the GUI via specially crafted requests directed at specific endpoints."},{"lang":"es","value":"Una vulnerabilidad de asignación de recursos sin límites ni limitación [CWE-770] en FortiOS versiones 7.6.0, versiones 7.4.4 a 7.4.0, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones puede permitir que un atacante remoto no autenticado evite el acceso a la GUI a través de solicitudes especialmente manipuladas dirigidas a Endpoints específicos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-27T17:37:49.718656Z","id":"CVE-2024-46666","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.9","matchCriteriaId":"BA3C4552-7B3E-4BDC-ABBD-DB228D968B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-250","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-46667","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:31.797","lastModified":"2026-06-17T07:55:41.380","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections."},{"lang":"es","value":"Una asignación de recursos sin límites ni limitación en Fortinet FortiSIEM 5.3 todas las versiones, 5.4 todas las versiones, 6.x todas las versiones, 7.0 todas las versiones y 7.1.0 a 7.1.5 puede permitir que un atacante deniegue tráfico TLS válido mediante el consumo de todas las conexiones asignadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.9","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.5","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T14:27:09.560945Z","id":"CVE-2024-46667","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.3","matchCriteriaId":"A0258A88-352D-4F9A-894D-F7442CAFE461"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndIncluding":"6.1.2","matchCriteriaId":"24480037-F5CE-4CCE-800D-8C707B7F36AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.1","matchCriteriaId":"3345EC56-9176-4463-A0B0-88267618383E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.3","matchCriteriaId":"D9FC4C46-F269-4635-80BE-BED292538FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.4","matchCriteriaId":"0320CE9C-6A73-44B9-90F5-B166E39D4EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0","versionEndIncluding":"6.5.3","matchCriteriaId":"95BF2F4C-084C-4BA7-9135-C970504E5682"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.0","versionEndIncluding":"6.6.5","matchCriteriaId":"9BEF7191-7173-42FE-BEEE-0D956B1DCEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndIncluding":"6.7.9","matchCriteriaId":"E3BD3264-378E-407A-A964-68A5F5BF9C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"3E588953-625A-477F-832C-D18C34A6BC66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndExcluding":"7.1.6","matchCriteriaId":"18D56E3E-931D-45D0-A7F9-F039DB99AA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91E43A1B-D4C5-4FFF-9D3E-00140023921E"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-164","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-46668","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:31.950","lastModified":"2026-06-17T07:55:41.547","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through 7.0.15, and versions 6.4.0 through 6.4.15 may allow an unauthenticated remote user to consume all system memory via multiple large file uploads."},{"lang":"es","value":"Una vulnerabilidad de asignación de recursos sin límites o limitación [CWE-770] en las versiones 7.4.0 a 7.4.4, 7.2.0 a 7.2.8, 7.0.0 a 7.0.15 y 6.4.0 a 6.4.15 de FortiOS puede permitir que un usuario remoto no autenticado consuma toda la memoria sistema a través de múltiples cargas de archivos grandes."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:18:02.790039Z","id":"CVE-2024-46668","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.16","matchCriteriaId":"B481963F-0415-42C8-BB38-C1A8BDF4B9F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.16","matchCriteriaId":"3EAE013D-7AE4-4C7A-81A0-296FE00F12CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"678EB0FA-2B29-4108-8378-C4803A543193"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-219","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-46669","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:32.100","lastModified":"2026-06-17T07:55:41.730","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de enteros o de envoltura [CWE-190] en la versión 7.4.4 y anteriores, la versión 7.2.10 y anteriores; el servicio IKE IPsec del inquilino FortiOS de FortiSASE versión 23.4.b puede permitir que un atacante autenticado bloquee el túnel IPsec a través de solicitudes manipuladas, lo que resulta en una posible denegación de servicio."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","baseScore":3.5,"baseSeverity":"LOW","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:26.892124Z","id":"CVE-2024-46669","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.4.5","matchCriteriaId":"848B95D5-3792-4B4A-A3AF-B4D72569D4D0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-267","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-46670","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:32.243","lastModified":"2026-06-17T07:55:41.837","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de lectura fuera de los límites [CWE-125] en FortiOS versión 7.6.0, versión 7.4.4 y anteriores, versión 7.2.9 y anteriores y el servicio IKE IPsec de la versión 24.3.b del inquilino FortiSASE FortiOS puede permitir que un atacante remoto no autenticado active el consumo de memoria, lo que lleva a una denegación de servicio a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.4.0","lessThanOrEqual":"1.4.1","versionType":"semver","status":"affected"},{"version":"1.3.0","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:18:06.282792Z","id":"CVE-2024-46670","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"4D7D031B-221B-4738-AC83-4FB92A106528"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-266","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-47566","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:32.400","lastModified":"2026-06-17T07:57:19.240","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests."},{"lang":"es","value":"Una limitación incorrecta de una ruta de acceso a un directorio restringido ('Path Traversal') [CWE-23] en Fortinet FortiRecorder versión 7.2.0 a 7.2.1 y anteriores a 7.0.4 permite que un atacante privilegiado elimine archivos del sistema de archivos subyacente a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:08.487870Z","id":"CVE-2024-47566","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.5","matchCriteriaId":"152C9FCA-912A-4CE5-A3F7-3F3DE0F2825C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"C0B0D078-2F52-46B4-B9C0-162447828E1B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-401","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-47571","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:32.560","lastModified":"2026-06-17T07:57:19.807","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials."},{"lang":"es","value":"Una operación en un recurso después de su vencimiento o liberación en Fortinet FortiManager 6.4.12 a 7.4.0 permite a un atacante obtener acceso indebido a FortiGate a través de credenciales válidas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.3","status":"affected"},{"version":"7.0.7","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.12","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T14:23:18.623557Z","id":"CVE-2024-47571","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-672"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.7","versionEndExcluding":"7.0.9","matchCriteriaId":"505BA2E7-D5A1-40DF-BA41-C2F31320BAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","matchCriteriaId":"11249452-445C-4755-938F-D61DFEC61953"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A61D3CDD-2BA3-4ECF-B734-676095A820EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-239","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-47572","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:32.717","lastModified":"2026-06-17T07:57:19.923","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker to execute unauthorized code or commands via manipulating csv file"},{"lang":"es","value":"Una neutralización incorrecta de elementos de fórmula en un archivo csv en Fortinet FortiSOAR 7.2.1 a 7.4.1 permite a un atacante ejecutar código o comandos no autorizados mediante la manipulación del archivo csv."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.2","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T14:25:14.521485Z","id":"CVE-2024-47572","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1236"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndIncluding":"7.2.2","matchCriteriaId":"1538C214-C91E-4C8A-9221-06FF081D919E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.3","matchCriteriaId":"1FDE7F03-DE72-4423-BB8F-B92025C84B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"71680E88-580C-421D-9599-FC0CC8376F06"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-210","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-48884","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:32.873","lastModified":"2026-10-22T14:17:35.977","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.9, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.4.0 through 7.4.5, FortiProxy 7.2.0 through 7.2.11, FortiProxy 7.0.0 through 7.0.18, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions may allow a remote authenticated attacker with access to the security fabric interface and port to write arbitrary files or a remote unauthenticated attacker to delete an arbitrary folder"},{"lang":"es","value":"Una limitación incorrecta de una ruta de acceso a un directorio restringido ('Path Traversal') en Fortinet FortiManager versiones 7.6.0 a 7.6.1, 7.4.1 a 7.4.3, FortiOS versiones 7.6.0, 7.4.0 a 7.4.4, 7.2.5 a 7.2.9, 7.0.0 a 7.0.15, 6.4.0 a 6.4.15, FortiProxy 7.4.0 a 7.4.5, 7.2.0 a 7.2.11, 7.0.0 a 7.0.18, 2.0.0 a 2.0.14, 1.2.0 a 1.2.13, 1.1.0 a 1.1.6, 1.0.0 a 1.0.7, FortiManager Cloud versiones 7.4.1 hasta 7.4.3, FortiRecorder versiones 7.2.0 hasta 7.2.1, 7.0.0 hasta 7.0.4, FortiVoice versiones 7.0.0 hasta 7.0.4, 6.4.0 hasta 6.4.9, 6.0.0 hasta 6.0.12, FortiWeb 7.6.0, 7.4.0 hasta 7.4.4, 7.2.0 hasta 7.2.10, 7.0.0 hasta 7.0.10, 6.4.0 hasta 6.4.3 permite al atacante activar una escalada de privilegios a través de paquetes especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.1","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:17:58.698254Z","id":"CVE-2024-48884","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"7269FDB6-A1D4-4912-8751-87BA52614FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"241A8930-4ADA-4380-AA42-F10B28487595"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"164DEDC3-B1C0-42AC-9ADB-CE03CF6A71CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"7.0.19","matchCriteriaId":"32CFAF1E-358A-4F6D-96CB-D7229F0D9D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"C8B93C73-1E94-4854-8405-C3689860A74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"5B276403-CE85-445A-9E5D-BBFBD7AB7A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"CD60BA50-3F98-46BF-97E8-28AB207DE12A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"C0B0D078-2F52-46B4-B9C0-162447828E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.4.10","matchCriteriaId":"BBF1E214-4BC5-47E8-BF02-072D6D830BAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"5EEE0DFA-DE31-4D26-AC98-6BCED8F008DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"CDB9CE13-AAF4-418C-BA26-1A0D53C5C1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"28B43375-DA74-4C5F-BAEE-39F312EEF51F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.16","matchCriteriaId":"B481963F-0415-42C8-BB38-C1A8BDF4B9F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.16","matchCriteriaId":"3EAE013D-7AE4-4C7A-81A0-296FE00F12CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"4D7D031B-221B-4738-AC83-4FB92A106528"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-259","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-48886","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:33.027","lastModified":"2026-06-17T07:58:58.360","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack."},{"lang":"es","value":"Una autenticación débil en Fortinet FortiOS versiones 7.4.0 a 7.4.4, 7.2.0 a 7.2.8, 7.0.0 a 7.0.15, 6.4.0 a 6.4.15, FortiProxy versiones 7.4.0 a 7.4.4, 7.2.0 a 7.2.10, 7.0.0 a 7.0.17, 2.0.0 a 2.0.14, FortiManager versiones 7.6.0 a 7.6.1, 7.4.1 a 7.4.3, FortiManager Cloud versiones 7.4.1 a 7.4.3 y FortiAnalyzer Cloud versiones 7.4.1 a 7.4.3 permite a un atacante ejecutar código o comandos no autorizados mediante un ataque de fuerza bruta."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:27.567437Z","id":"CVE-2024-48886","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1390"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"EF81840B-F269-4B40-8014-D4B18A2A016F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"DC9AD7A8-B390-4037-872B-02E1BEEDEC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"6EA0888C-2D95-46ED-9BA9-F99072C02FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"7269FDB6-A1D4-4912-8751-87BA52614FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"241A8930-4ADA-4380-AA42-F10B28487595"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"164DEDC3-B1C0-42AC-9ADB-CE03CF6A71CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.15","matchCriteriaId":"60E6EA0C-12E8-4EA7-901C-BEDE07BC88DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.18","matchCriteriaId":"D273F0B5-A9F3-460B-8E96-7BEB816A91D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"77A6D950-F8AE-4E12-9D43-C49BFE03B3D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"6794E3E0-7FC3-40D8-9568-20E6878E3EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.16","matchCriteriaId":"FA0532A5-31F2-4A92-BF31-6003E28AC948"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"678EB0FA-2B29-4108-8378-C4803A543193"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-221","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-48890","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:33.187","lastModified":"2026-06-17T07:58:58.737","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook"},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo ('Inyección de comando del sistema operativo') [CWE-78] en el conector IMAP de FortiSOAR versión 3.5.7 y anteriores puede permitir que un atacante autenticado ejecute código o comandos no autorizados a través de un playbook manipulado específicamente"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar:7.5.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.5.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.3,"impactScore":3.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-15T14:54:48.634044Z","id":"CVE-2024-48890","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar_imap_connector:*:*:*:*:*:*:*:*","versionEndExcluding":"3.5.8","matchCriteriaId":"81F7D35F-38C7-4C7A-9038-58819B10D19C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-415","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-48893","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:33.333","lastModified":"2026-06-17T07:58:59.067","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSOAR 7.3.0 through 7.3.3, 7.2.1 through 7.2.2 may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via the creation of malicious playbook."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web [CWE-79] en FortiSOAR 7.3.0 a 7.3.3, 7.2.1 a 7.2.2 puede permitir que un atacante autenticado realice un ataque Cross Site Scripting (XSS) almacenado mediante la creación de un playbook malicioso."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:52.295434Z","id":"CVE-2024-48893","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndIncluding":"7.3.3","matchCriteriaId":"9FC79454-2365-43A2-B27F-BF007CD41981"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-405","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-50564","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:33.490","lastModified":"2026-06-17T08:04:42.400","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped."},{"lang":"es","value":"El uso de una clave criptográfica codificada en Fortinet FortiClientWindows versión 7.4.0, 7.2.x todas las versiones, 7.0.x todas las versiones y 6.4.x todas las versiones puede permitir que un usuario con pocos privilegios descifre la comunicación entre procesos a través de una canalización denominada monitoreo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-15T14:51:55.463826Z","id":"CVE-2024-50564","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.9","matchCriteriaId":"82E4143C-57CE-40F5-BBBE-F82B89153749"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:windows:*:*","matchCriteriaId":"6B512696-8596-4458-ADC9-24DD3C6C377B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-216","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-50566","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:33.650","lastModified":"2026-06-17T08:04:42.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager Cloud 7.6.0 through 7.6.1, FortiManager Cloud 7.4.0 through 7.4.4, FortiManager Cloud 7.2.2 through 7.2.7, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.1 through 7.2.8 may allow an authenticated remote attacker to execute unauthorized code via FGFM crafted requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiManager versiones 7.6.0 a 7.6.1, versiones 7.4.5 a 7.4.0 y versiones 7.2.1 a 7.2.8, FortiManager Cloud versiones 7.6.0 a 7.6.1, versiones 7.4.0 a 7.4.4 y versiones 7.2.2 a 7.2.7 puede permitir que un atacante remoto autenticado ejecute código no autorizado a través de solicitudes FGFM manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.1","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.2","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:49.654273Z","id":"CVE-2024-50566","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.9","matchCriteriaId":"CBA16B3B-9767-4B61-BA35-2DDF70D66D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"24796E3A-DDCB-4949-9080-5DCEEECF0B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"241A8930-4ADA-4380-AA42-F10B28487595"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.2","versionEndExcluding":"7.2.8","matchCriteriaId":"57B085BA-AF25-4EE9-8EC6-BD588F3C90CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"9FBDCAD3-019A-4F46-AB5D-448E525E4E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"3C4D647A-5EA1-4047-9E59-987FC8A74F0B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-463","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52963","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:33.807","lastModified":"2026-06-17T08:07:56.127","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets."},{"lang":"es","value":"Una escritura fuera de los límites en las versiones Fortinet FortiOS 7.6.0, 7.4.0 a 7.4.6, 7.2.0 a 7.2.10, 7.0.0 a 7.0.16, 6.4.0 a 6.4.15 permite a un atacante activar una denegación de servicio a través de paquetes especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.20","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.4.0","lessThanOrEqual":"1.4.2","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:33.947500Z","id":"CVE-2024-52963","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.11","matchCriteriaId":"753664B2-3AE8-499A-9C8A-B7D928439697"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"26515743-5A9A-4885-A08E-535E4ABE0153"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-373","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2024-52967","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:33.967","lastModified":"2026-06-17T08:07:56.677","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute unauthorized code or commands via html injection."},{"lang":"es","value":"Una neutralización incorrecta de las etiquetas HTML relacionadas con Script en una página web (XSS básico) en Fortinet FortiPortal 6.0.0 a 6.0.14 permite a un atacante ejecutar código o comandos no autorizados a través de la inyección HTML."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","baseScore":3.5,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:02.667293Z","id":"CVE-2024-52967","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-80"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.15","matchCriteriaId":"9CE5BD60-C70A-492C-BC35-5F568A4F180D"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-211","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52969","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:34.123","lastModified":"2026-06-17T08:07:56.900","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiSIEM ersion 7.1.7 and below, version 7.1.0, version 7.0.3 and below, version 6.7.9 and below, 6.7.8, version 6.6.5 and below, version 6.5.3 and below, version 6.4.4 and below Update/Create Case feature may allow an authenticated attacker to extract database information via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando SQL ('Inyección SQL') [CWE-89] en FortiSIEM versión 7.1.7 y anteriores, versión 7.1.0, versión 7.0.3 y anteriores, versión 6.7.9 y anteriores, 6.7.8, versión 6.6.5 y anteriores, versión 6.5.3 y anteriores, versión 6.4.4 y anteriores La función Actualizar/Crear caso puede permitir que un atacante autenticado extraiga información de la base de datos a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.9","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.5","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:11.758765Z","id":"CVE-2024-52969","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"7.1.7","matchCriteriaId":"212DD268-6A3F-4F12-A935-D6BA7B5DD4F1"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-417","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-54021","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:34.287","lastModified":"2026-06-17T08:09:41.367","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in Fortinet FortiOS 7.2.0 through 7.6.0, FortiProxy 7.2.0 through 7.4.5 may allow a remote unauthenticated attacker to bypass the file filter via crafted HTTP headers."},{"lang":"es","value":"Una neutralización incorrecta de las secuencias crlf en los encabezados http (\"división de respuesta http\") en Fortinet FortiOS 7.2.0 a 7.6.0, FortiProxy 7.2.0 a 7.4.5 permite a un atacante ejecutar código o comandos no autorizados a través del encabezado HTTP manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-15T14:49:26.902314Z","id":"CVE-2024-54021","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-113"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"C8B93C73-1E94-4854-8405-C3689860A74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"5B276403-CE85-445A-9E5D-BBFBD7AB7A68"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"678EB0FA-2B29-4108-8378-C4803A543193"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-282","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-55591","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:34.450","lastModified":"2026-08-05T05:16:42.380","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module."},{"lang":"es","value":"Una vulnerabilidad de omisión de autenticación mediante una ruta o canal alternativo [CWE-288] que afecta a FortiOS versión 7.0.0 a 7.0.16 y FortiProxy versión 7.0.0 a 7.0.19 y 7.2.0 a 7.2.12 permite que un atacante remoto obtenga privilegios de superadministrador mediante solicitudes manipuladas al módulo websocket Node.js."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-22T00:00:00+00:00","id":"CVE-2024-55591","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-01-14","cisaActionDue":"2025-01-21","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.20","matchCriteriaId":"1B14CD59-F557-48A0-8458-BECD3AD7DB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.13","matchCriteriaId":"EDC18768-0891-465E-9900-3DF5D22A5CB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.17","matchCriteriaId":"BD357034-B2FD-4C2E-97FE-2C54D686D885"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-535","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-55591","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2024-55593","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:34.610","lastModified":"2026-06-17T08:11:17.693","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.3.17 through 7.6.1 allows attacker to gain information disclosure via crafted SQL queries"},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando SQL ('inyección SQL') en las versiones 6.3.17 a 7.6.1 de Fortinet FortiWeb permite a un atacante obtener información a través de consultas SQL manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"},{"version":"6.3.6","lessThanOrEqual":"6.3.23","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:15:29.839471Z","id":"CVE-2024-55593","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.6","versionEndExcluding":"7.6.2","matchCriteriaId":"D1A4D0B4-27A6-4DD1-9E01-F0927EFC4ED4"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-465","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-56497","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-14T14:15:34.760","lastModified":"2026-06-17T08:12:15.623","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.6 and 6.4.0 through 6.4.7, FortiRecorder versions 7.0.0 and 6.4.0 through 6.4.4 allows attacker to execute unauthorized code or commands via the CLI."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiMail versiones 7.2.0 a 7.2.4 y 7.0.0 a 7.0.6 y 6.4.0 a 6.4.7, FortiRecorder versiones 7.0.0 y 6.4.0 a 6.4.4 permite a un atacante ejecutar código o comandos no autorizados a través de la CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T15:16:38.876441Z","id":"CVE-2024-56497","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.8","matchCriteriaId":"759248EA-4A1C-4E68-BDA0-81A6D30375E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"997C1A09-3ED3-4C44-B7CC-9C7A895F2417"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"F49F4784-29AE-4B26-8805-D1B34AF9E99F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.5","matchCriteriaId":"B2D6C54F-3BB4-49AB-97F4-DFF8E6AB51F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"F9A223FA-0051-4A86-8864-3B747DE1CAC3"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-170","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-35280","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-15T11:15:09.087","lastModified":"2026-06-17T07:34:40.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiDeceptor 5.3.0, FortiDeceptor 5.2.0, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions, FortiDeceptor 4.3 all versions, FortiDeceptor 4.2 all versions, FortiDeceptor 4.1 all versions, FortiDeceptor 4.0 all versions, FortiDeceptor 3.3 all versions, FortiDeceptor 3.2 all versions, FortiDeceptor 3.1 all versions, FortiDeceptor 3.0 all versions may allow an attacker to perform a reflected cross-site scripting attack in the recovery endpoints"},{"lang":"es","value":" Una neutralización incorrecta de la entrada durante la generación de páginas web (\"cross-site scripting\") en Fortinet FortiDeceptor 3.x todas las versiones, 4.x todas las versiones, 5.0 todas las versiones, 5.1 todas las versiones, versión 5.2.0 y versión 5.3.0 puede permitir que un atacante realice un ataque de cross-site scripting reflejado en los endpoints de recuperación."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDeceptor","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortideceptor:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:3.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.3.0","status":"affected"},{"version":"5.2.0","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"},{"version":"4.3.0","status":"affected"},{"version":"4.2.0","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.1","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.3","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.2","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.1","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-15T14:44:56.156689Z","id":"CVE-2024-35280","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"5.2.1","matchCriteriaId":"F75A3F8D-C36D-4F91-ACC3-00AF611950DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"A85A82BF-DCB3-4E8B-A2A3-6F23F11FFB00"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-010","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45331","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-16T09:15:06.500","lastModified":"2026-07-08T14:16:53.347","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.2, FortiAnalyzer Cloud 7.2.1 through 7.2.6, FortiAnalyzer Cloud 7.0 all versions, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions allows attacker to escalate privilege via specific shell commands"},{"lang":"es","value":"Una asignación de privilegios incorrecta en las versiones 7.4.0 a 7.4.3, 7.2.0 a 7.2.5, 7.0.0 a 7.0.13, 6.4.0 a 6.4.15 de Fortinet FortiAnalyzer, las versiones 7.4.0 a 7.4.2, 7.2.0 a 7.2.5, 7.0.0 a 7.0.13, 6.4.0 a 6.4.15 de FortiManager, las versiones 7.4.1 a 7.4.2, 7.2.1 a 7.2.6, 7.0.1 a 7.0.13, 6.4.1 a 6.4.7 de FortiAnalyzer Cloud permite a un atacante escalar privilegios a través de comandos de shell específicos"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.1","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-16T14:17:17.440183Z","id":"CVE-2024-45331","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-266"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"F07BE2AB-5F28-4773-B9C3-1D76EA1C2D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"E6F162A7-0D01-43E0-99D8-D7B87B080853"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.2.7","matchCriteriaId":"38BFF3B9-3927-4B15-A573-4EDB20362841"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.3","matchCriteriaId":"40C3665B-3E49-4D0C-B924-266D49F1E510"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"71CC4AA3-04CC-49CA-A012-E28C4D1F11DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3AE9CAFD-5D5B-4799-8690-624225963595"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.2.7","matchCriteriaId":"75DA0ED6-C606-4763-A7B0-575F8061237A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"164DEDC3-B1C0-42AC-9ADB-CE03CF6A71CC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-127","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-48885","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-16T09:15:06.737","lastModified":"2026-07-08T14:16:53.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to escalate privilege via specially crafted packets."},{"lang":"es","value":" Una limitación incorrecta de una ruta de acceso a un directorio restringido (\"path traversal\") en Fortinet FortiRecorder versiones 7.2.0 a 7.2.1, 7.0.0 a 7.0.4, FortiWeb versiones 7.6.0, 7.4.0 a 7.4.4, 7.2.0 a 7.2.10, 7.0.0 a 7.0.10, 6.4.0 a 6.4.3, FortiVoice versiones 7.0.0 a 7.0.4, 6.4.0 a 6.4.9, 6.0.0 a 6.0.12 permite a un atacante escalar privilegios a través de paquetes especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-16T14:15:57.157206Z","id":"CVE-2024-48885","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"CD60BA50-3F98-46BF-97E8-28AB207DE12A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"C0B0D078-2F52-46B4-B9C0-162447828E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.4.10","matchCriteriaId":"BBF1E214-4BC5-47E8-BF02-072D6D830BAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.5","matchCriteriaId":"5EEE0DFA-DE31-4D26-AC98-6BCED8F008DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"CDB9CE13-AAF4-418C-BA26-1A0D53C5C1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"28B43375-DA74-4C5F-BAEE-39F312EEF51F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-259","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-50563","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-16T10:15:09.480","lastModified":"2026-06-17T08:04:42.277","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack."},{"lang":"es","value":"Una autenticación débil en Fortinet FortiManager Cloud, FortiAnalyzer versiones 7.6.0 a 7.6.1, 7.4.1 a 7.4.3, FortiAnalyzer Cloud versiones 7.4.1 a 7.4.3, FortiManager versiones 7.6.0 a 7.6.1, 7.4.1 a 7.4.3, FortiManager Cloud versiones 7.4.1 a 7.4.3 permite a un atacante ejecutar código o comandos no autorizados a través de un ataque de fuerza bruta."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-16T14:14:02.872070Z","id":"CVE-2024-50563","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1390"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"EF81840B-F269-4B40-8014-D4B18A2A016F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"DC9AD7A8-B390-4037-872B-02E1BEEDEC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"6EA0888C-2D95-46ED-9BA9-F99072C02FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"7269FDB6-A1D4-4912-8751-87BA52614FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"241A8930-4ADA-4380-AA42-F10B28487595"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"164DEDC3-B1C0-42AC-9ADB-CE03CF6A71CC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-221","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-23439","sourceIdentifier":"psirt@fortinet.com","published":"2025-01-22T10:15:07.737","lastModified":"2026-06-17T04:30:00.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A externally controlled reference to a resource in another sphere vulnerability in Fortinet  allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver"},{"lang":"es","value":"Una referencia controlada externamente a un recurso en otra esfera en Fortinet FortiManager anterior a la versión 7.4.3, FortiMail anterior a la versión 7.0.3, FortiAnalyzer anterior a la versión 7.4.3, FortiVoice versión 7.0.0, 7.0.1 y anterior a 6.4.8, FortiProxy anterior a la versión 7.0.4, FortiRecorder versión 6.4.0 a 6.4.2 y anterior a 6.0.10, FortiAuthenticator versión 6.4.0 a 6.4.1 y anterior a 6.3.3, FortiNDR versión 7.2.0 anterior a 7.1.0, FortiWLC anterior a la versión 8.6.4, FortiPortal anterior a la versión 6.0.9, FortiOS versión 7.2.0 y anterior a 7.0.5, FortiADC versión 7.0.0 a 7.0.1 y anterior 6.2.3, FortiDDoS anterior a la versión 5.5.1, FortiDDoS-F anterior a la versión 6.3.3, FortiTester anterior a la versión 7.2.1, FortiSOAR anterior a la versión 7.2.2 y FortiSwitch anterior a la versión 6.3.3 permiten a los atacantes envenenar cachés web a través de solicitudes HTTP manipulado, donde el encabezado `Host` apunta a un servidor web arbitrario."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiTester","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortitester:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:4.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:4.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.9.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.9.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.9.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.8.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:3.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.1","versionType":"semver","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.1","versionType":"semver","status":"affected"},{"version":"4.0.0","status":"affected"},{"version":"3.9.0","lessThanOrEqual":"3.9.2","versionType":"semver","status":"affected"},{"version":"3.8.0","status":"affected"},{"version":"3.7.0","lessThanOrEqual":"3.7.1","versionType":"semver","status":"affected"},{"version":"3.6.0","status":"affected"},{"version":"3.5.0","lessThanOrEqual":"3.5.1","versionType":"semver","status":"affected"},{"version":"3.4.0","status":"affected"},{"version":"3.3.0","lessThanOrEqual":"3.3.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.*:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThan":"6.4.*","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:2.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"},{"version":"2.7.0","lessThanOrEqual":"2.7.7","versionType":"semver","status":"affected"},{"version":"2.6.0","lessThanOrEqual":"2.6.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortindr:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.1.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.3","versionType":"semver","status":"affected"},{"version":"1.4.0","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.8:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.3","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.7","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoaron-premise:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.3","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDDoS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortiddos:5.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.5.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.5.0","lessThanOrEqual":"5.5.1","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.3","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.2","versionType":"semver","status":"affected"},{"version":"5.2.0","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"},{"version":"4.7.0","status":"affected"},{"version":"4.6.0","status":"affected"},{"version":"4.5.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWLC","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiwlc:8.6.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","lessThanOrEqual":"8.6.7","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.5","versionType":"semver","status":"affected"},{"version":"8.4.4","lessThanOrEqual":"8.4.8","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThanOrEqual":"8.4.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiauthenticator:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:5.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.2","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.3","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.8","versionType":"semver","status":"affected"},{"version":"5.5.0","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.1","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.1","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.2","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDDoS-F","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortiddos-f:6.3.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.3.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.3","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitch","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitch:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.8","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-22T14:21:27.552014Z","id":"CVE-2022-23439","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-610"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndExcluding":"6.2.4","matchCriteriaId":"B7685DE5-EEF4-4EFF-9EE0-1ABC59A46B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.4","matchCriteriaId":"959F9558-9C68-4046-AF5F-C543C9B5C3DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"B4F857C3-0369-45CD-8745-FC6086A6B401"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"5.5.2","matchCriteriaId":"5C2587E4-5D24-4C81-AD13-B3205FA07D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"6.3.4","matchCriteriaId":"999EDF79-3052-4A4E-9B71-B0FEDEBFE33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.4","matchCriteriaId":"9E3E1107-F78C-41B7-A8D4-E984EF551B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"7.1.1","matchCriteriaId":"2798BBCF-0867-4C5B-9F28-6CD9846DAD7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"06DD8B01-B4BC-432D-9045-40AD6DA84CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"C4BF015A-6391-40D1-9FC4-C73110A2D52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.4.0","matchCriteriaId":"CF9591AF-D4A5-44F6-8535-1D166646E118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.11","matchCriteriaId":"0A7151C5-DB42-4F91-B84C-CDA9CEF73A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.3","matchCriteriaId":"2DDA9A48-7687-40A3-A14F-5EB89A20A386"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.3.0","matchCriteriaId":"B72000EC-F0D5-4100-B0DB-7405EDE32C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7.0","versionEndExcluding":"7.2.2","matchCriteriaId":"C8838FC8-770F-41ED-8F25-8E2953258677"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.9","matchCriteriaId":"C97B8181-C602-4E70-B3EA-CBE1FA62A220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.7","matchCriteriaId":"C68A52C3-281D-4B4E-B0AA-0162D846BBB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"00C9C02B-E40F-4536-BC74-A7DA84E4B845"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4562BDF7-D894-4CD8-95AC-9409FDEBE73F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.5","matchCriteriaId":"FF5E55C0-C600-4234-AA0C-21259AA6D97F"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-494","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2023-40721","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:21.403","lastModified":"2026-06-17T06:19:14.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet  allows a privileged attacker to execute arbitrary code or commands via specially crafted requests."},{"lang":"es","value":"Una vulnerabilidad de uso de cadena de formato controlada externamente [CWE-134] en Fortinet FortiOS versión 7.4.0 a 7.4.1 y anteriores a 7.2.6, FortiProxy versión 7.4.0 y anteriores a 7.2.7, FortiPAM versión 1.1.2 y anteriores a 1.0.3, FortiSwitchManager versión 7.2.0 a 7.2.2 y anteriores a 7.0.2 permite a un atacante privilegiado ejecutar código o comandos arbitrarios a través de solicitudes especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-11T16:35:49.488058Z","id":"CVE-2023-40721","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.0.14","matchCriteriaId":"1A499542-916C-4D27-98DD-33538D4912EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"553C4BA9-953B-4017-8498-785BDA7A3006"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"7F75C4E9-62F6-43F2-B941-476F31F8F39C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"CC883A39-5441-45A6-AEEB-D916FA39F635"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"7.0.15","matchCriteriaId":"942F956A-8997-4842-AD3A-BB9F0373F05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"469D97BA-282C-4875-A156-FDA00B5B4093"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"9010968B-B839-4B7C-BFB5-6BD9CBCEC166"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.2.0","matchCriteriaId":"E20E542A-1F00-4124-A83B-784B760CE21D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-261","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-27780","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:21.850","lastModified":"2026-06-17T07:20:17.030","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM  7.1 all versions, 7.0 all versions, 6.7 all versions incident page may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests."},{"lang":"es","value":"Vulnerabilidades de neutralización incorrecta múltiple de entradas durante la generación de páginas web ('Cross-site Scripting') [CWE-79] en FortiSIEM 7.1 todas las versiones, 7.0 todas las versiones, 6.7 todas las versiones La página de incidentes puede permitir que un atacante autenticado realice un ataque de cross-site scripting a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"7.1.0","lessThanOrEqual":"7.1.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N","baseScore":2.2,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-11T16:34:35.441554Z","id":"CVE-2024-27780","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndIncluding":"6.7.9","matchCriteriaId":"E3BD3264-378E-407A-A964-68A5F5BF9C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.3","matchCriteriaId":"3E588953-625A-477F-832C-D18C34A6BC66"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndIncluding":"7.1.8","matchCriteriaId":"EE2B0C4E-1660-487B-A1AA-22F5E24519CA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-324","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-27781","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:21.980","lastModified":"2026-06-17T07:20:17.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0.0 through 4.0.4, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Una neutralización incorrecta de la entrada durante la generación de páginas web (\"cross-site scripting\") en Fortinet FortiSandbox al menos en las versiones 4.4.0 a 4.4.4 y 4.2.0 a 4.2.6 y 4.0.0 a 4.0.4 y 3.2.0 a 3.2.4 y 3.1.0 a 3.1.5 y 3.0.0 a 3.0.7 permite que un atacante autenticado ejecute código o comandos no autorizados a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.4","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.4","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-14T04:55:16.649198Z","id":"CVE-2024-27781","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"4.0.5","matchCriteriaId":"C21CF86A-2AA1-47BD-ADDF-1EEF8E5680A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.7","matchCriteriaId":"958CF981-06BE-44FF-B5CF-156649D86232"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.5","matchCriteriaId":"2C77A903-42B3-41D3-BDC6-E138679B5400"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-063","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-33504","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:22.110","lastModified":"2026-06-17T07:31:52.810","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9, 7.0 all versions, 6.4 all versions may allow an attacker with JSON API access permissions to decrypt some secrets even if the 'private-data-encryption' setting is enabled."},{"lang":"es","value":"Una vulnerabilidad de uso de una clave criptográfica codificada para cifrar datos confidenciales [CWE-321] en FortiManager 7.6.0 a 7.6.1, 7.4.0 a 7.4.5, 7.2.0 a 7.2.9, 7.0 todas las versiones, 6.4 todas las versiones puede permitir que un atacante con permisos de acceso a la API JSON descifre algunos secretos incluso si la configuración 'private-data-encryption' está habilitada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","baseScore":7.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":4.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-11T16:32:42.643228Z","id":"CVE-2024-33504","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.10","matchCriteriaId":"636AB971-0D6F-416B-A64D-E52AE91AB092"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"24796E3A-DDCB-4949-9080-5DCEEECF0B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"241A8930-4ADA-4380-AA42-F10B28487595"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.2.9","matchCriteriaId":"DDF891B6-8968-4E2B-89AC-7EDE3EC5886F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.6","matchCriteriaId":"6F663525-A2D6-40AB-905F-367B7E83054D"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-094","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/orangecertcc/security-research/security/advisories/GHSA-pgc3-m5p5-4vc3","source":"psirt@fortinet.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-35279","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:22.253","lastModified":"2026-06-17T07:34:40.483","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to execute arbitrary code or commands via crafted UDP packets through the CAPWAP control, provided the attacker were able to evade FortiOS stack protections and provided the fabric service is running on the exposed interface."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en pila [CWE-121] en Fortinet FortiOS versión 7.2.4 a 7.2.8 y versión 7.4.0 a 7.4.4 permite a un atacante remoto no autenticado ejecutar código o comandos arbitrarios a través de paquetes UDP manipulados mediante el control CAPWAP, siempre que el atacante haya podido evadir las protecciones de la pila de FortiOS y siempre que el servicio de estructura se esté ejecutando en la interfaz expuesta."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.4","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-14T04:55:21.270531Z","id":"CVE-2024-35279","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.4","versionEndExcluding":"7.2.9","matchCriteriaId":"682BB28A-AC64-459D-B330-EA2E06AA9FD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-160","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-36508","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:22.393","lastModified":"2026-06-17T07:36:52.090","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 CLI allows an authenticated admin user with diagnose privileges to delete files on the system."},{"lang":"es","value":"Una vulnerabilidad de limitación incorrecta de una ruta de acceso a un directorio restringido ('Path Traversal') [CWE-22] en Fortinet FortiManager versión 7.4.0 a 7.4.2 y anteriores a 7.2.5 y Fortinet FortiAnalyzer versión 7.4.0 a 7.4.2 y anteriores a 7.2.5 CLI permite que un usuario administrador autenticado con privilegios de diagnóstico elimine archivos en el sistema."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-11T16:35:29.928186Z","id":"CVE-2024-36508","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"71CC4AA3-04CC-49CA-A012-E28C4D1F11DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"F07BE2AB-5F28-4773-B9C3-1D76EA1C2D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-147","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40584","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:22.540","lastModified":"2026-06-17T07:46:07.597","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiAnalyzer BigData version 7.4.0, 7.2.0 through 7.2.7, 7.0.1 through 7.0.6, 6.4.5 through 6.4.7 and 6.2.5, Fortinet FortiAnalyzer Cloud version 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.13 and 6.4.1 through 6.4.7 and Fortinet FortiManager Cloud version 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.13 and 6.4.1 through 6.4.7 GUI allows an authenticated privileged attacker to execute unauthorized code or commands via crafted HTTPS or HTTP requests."},{"lang":"es","value":"Vulnerabilidad de neutralización indebida de elementos especiales utilizados en un comando del SO ('Inyección de comando del SO') [CWE-78] en Fortinet FortiAnalyzer versión 7.4.0 a 7.4.3, 7.2.0 a 7.2.5, 7.0.0 a 7.0.13, 6.4.0 a 6.4.15 y 6.2.2 a 6.2.13, Fortinet FortiManager versión 7.4.0 a 7.4.3, 7.2.0 a 7.2.5, 7.0.0 a 7.0.13, 6.4.0 a 6.4.15 y 6.2.2 a 6.2.13, Fortinet FortiAnalyzer BigData versión 7.4.0, 7.2.0 a 7.2.7, 7.0.1 a 7.0.6, La GUI permite que un atacante privilegiado autenticado ejecute código o comandos no autorizados a través de solicitudes HTTPS o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.2","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.2","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-11T16:35:14.409005Z","id":"CVE-2024-40584","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndIncluding":"7.0.14","matchCriteriaId":"F570FCDD-C284-416A-A039-031DCE8D1299"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.6","matchCriteriaId":"482363A8-9BE6-46F1-8795-6268F6B84FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"164DEDC3-B1C0-42AC-9ADB-CE03CF6A71CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.2","versionEndIncluding":"6.2.13","matchCriteriaId":"53D1B5F7-7F55-400E-9209-85FBDF4288C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"71CC4AA3-04CC-49CA-A012-E28C4D1F11DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3AE9CAFD-5D5B-4799-8690-624225963595"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1","versionEndExcluding":"7.2.8","matchCriteriaId":"1A9C272F-2E14-4BC3-B3A3-1EF4E93BDBFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"80598594-A45A-4E69-B968-1DD3DBD30FF9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.2.6","matchCriteriaId":"542A27FE-435D-42C3-8351-85C2DAB2B792"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"6EA0888C-2D95-46ED-9BA9-F99072C02FE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.2","versionEndExcluding":"7.2.6","matchCriteriaId":"29075E53-08DB-4C16-BE7D-44EA10F4C6B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"E6F162A7-0D01-43E0-99D8-D7B87B080853"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-220","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40586","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:22.683","lastModified":"2026-06-17T07:46:07.903","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiClient versión 7.4.0, versión 7.2.6 y anteriores, versión 7.0.13 y anteriores para Windows puede permitir que un usuario local aumente sus privilegios a través de la tubería de servicio FortiSSLVPNd."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.3","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-11T16:35:40.693018Z","id":"CVE-2024-40586","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.3","versionEndExcluding":"7.0.14","matchCriteriaId":"0AFFD932-83AE-4FB3-9949-AE2ADD8B87A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"D0671451-618C-435A-8E35-49E155CEAD78"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:windows:*:*","matchCriteriaId":"6B512696-8596-4458-ADC9-24DD3C6C377B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-279","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40591","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:22.810","lastModified":"2026-06-17T07:46:08.433","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profile has the Security Fabric permission to escalate their privileges to super-admin by connecting the targetted FortiGate to a malicious upstream FortiGate they control."},{"lang":"es","value":"Una vulnerabilidad de asignación incorrecta de privilegios [CWE-266] en Fortinet FortiOS versión 7.6.0, 7.4.0 a 7.4.4, 7.2.0 a 7.2.9 y anteriores a 7.0.15 permite que un administrador autenticado cuyo perfil de acceso tiene el permiso Security Fabric escale sus privilegios a superadministrador conectando el FortiGate objetivo a un FortiGate ascendente malicioso que controlan."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-14T04:55:22.745797Z","id":"CVE-2024-40591","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-266"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.16","matchCriteriaId":"B481963F-0415-42C8-BB38-C1A8BDF4B9F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.16","matchCriteriaId":"3EAE013D-7AE4-4C7A-81A0-296FE00F12CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"4D7D031B-221B-4738-AC83-4FB92A106528"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-302","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-50567","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:22.980","lastModified":"2026-06-17T08:04:42.850","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWeb 7.4.0 a 7.6.0 permite a un atacante ejecutar código o comandos no autorizados a través de una entrada manipulada específicamente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-14T04:55:18.160154Z","id":"CVE-2024-50567","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.6","matchCriteriaId":"57DC59F7-E14E-46A7-B1D9-8BA9DF9BED95"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"28B43375-DA74-4C5F-BAEE-39F312EEF51F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-438","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-50569","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:23.123","lastModified":"2026-06-17T08:04:43.083","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiWeb 7.0.0 a 7.6.0 permite a un atacante ejecutar código o comandos no autorizados a través de una entrada manipulada específicamente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-14T04:55:19.674036Z","id":"CVE-2024-50569","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.6","matchCriteriaId":"57DC59F7-E14E-46A7-B1D9-8BA9DF9BED95"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"28B43375-DA74-4C5F-BAEE-39F312EEF51F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-438","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52966","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:23.260","lastModified":"2026-06-17T08:07:56.553","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor in Fortinet FortiAnalyzer 6.4.0 through 7.6.0 allows attacker to cause information disclosure via filter manipulation."},{"lang":"es","value":"Una exposición de información confidencial a un actor no autorizado en Fortinet FortiAnalyzer 6.4.0 a 7.6.0 permite a un atacante provocar la divulgación de información mediante la manipulación de filtros."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-11T16:42:21.149495Z","id":"CVE-2024-52966","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.8","matchCriteriaId":"315D5DA2-C4F3-466E-912B-521624BF6EE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"6A0D7EE3-6F66-44DB-AC17-BC8EB61F928C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B2D08D6D-F909-4B6F-9223-6A2C50A453C7"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-422","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52968","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:23.400","lastModified":"2026-06-17T08:07:56.790","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password."},{"lang":"es","value":"Una autenticación incorrecta en Fortinet FortiClientMac 7.0.11 a 7.2.4 permite a un atacante obtener acceso indebido a MacOS a través de una contraseña vacía."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.3","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.11","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-11T16:34:59.442307Z","id":"CVE-2024-52968","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.11","versionEndExcluding":"7.0.13","matchCriteriaId":"7F45DE8A-9BB4-4F3D-8F6E-5FD38FAF14C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.2.3","versionEndExcluding":"7.2.5","matchCriteriaId":"77ADF19B-DD15-4EC4-8CA5-973003EE1C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:macos:*:*","matchCriteriaId":"0A079CA4-D957-402A-B899-31F26A89DF00"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-300","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-24470","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:34.730","lastModified":"2026-06-17T08:59:04.743","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to retrieve source code via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de resolución incorrecta de equivalencia de ruta [CWE-41] en FortiPortal 7.4.0 a 7.4.2, 7.2.0 a 7.2.6, 7.0.0 a 7.0.11 puede permitir que un atacante remoto no autenticado recupere el código fuente a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","baseScore":8.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":4.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-11T16:43:02.809120Z","id":"CVE-2025-24470","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-41"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"3EB99B65-75DE-4970-BAEB-112844AA16A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"DA631B72-FEDC-48D5-B07A-B2D3573FB452"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"F76BBBE6-E1E1-478E-810A-92B1C8742B4E"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-015","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-24472","sourceIdentifier":"psirt@fortinet.com","published":"2025-02-11T17:15:34.867","lastModified":"2026-08-05T05:16:43.473","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted CSF proxy requests."},{"lang":"es","value":"Una vulnerabilidad de omisión de autenticación mediante una ruta o canal alternativo [CWE-288] que afecta a FortiOS 7.0.0 a 7.0.16 y FortiProxy 7.2.0 a 7.2.12, 7.0.0 a 7.0.19 puede permitir que un atacante remoto obtenga privilegios de superadministrador a través de solicitudes de proxy CSF manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-12T00:00:00+00:00","id":"CVE-2025-24472","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-03-18","cisaActionDue":"2025-04-08","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.20","matchCriteriaId":"1B14CD59-F557-48A0-8458-BECD3AD7DB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.13","matchCriteriaId":"EDC18768-0891-465E-9900-3DF5D22A5CB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.17","matchCriteriaId":"BD357034-B2FD-4C2E-97FE-2C54D686D885"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-535","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24472","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2023-37933","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:38.480","lastModified":"2026-06-17T06:08:56.157","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC GUI version 7.4.0, 7.2.0 through 7.2.1\tand before 7.1.3 allows an authenticated attacker to perform an XSS attack via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('Cross-site Scripting') [CWE-79] en la GUI de FortiADC versión 7.4.0, 7.2.0 a 7.2.1 y anteriores a 7.1.3 permite que un atacante autenticado realice un ataque XSS a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-12T04:00:49.362893Z","id":"CVE-2023-37933","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndExcluding":"7.1.4","matchCriteriaId":"3DB611E1-5D4B-4982-8BF1-A3AF8D76699B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"496EDF78-A907-4340-8DE2-7FC9520DAD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C624CB5-F745-4781-839A-B397EC97590B"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-216","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-40723","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:39.843","lastModified":"2026-06-17T06:19:15.203","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 and 6.3.0 through 6.3.3 and 6.2.0 through 6.2.1 and 6.1.0 through 6.1.2 and 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 allows attacker to execute unauthorized code or commands via api request."},{"lang":"es","value":"Una exposición de información confidencial a un actor no autorizado en Fortinet FortiSIEM versión 6.7.0 a 6.7.4 y 6.6.0 a 6.6.3 y 6.5.0 a 6.5.1 y 6.4.0 a 6.4.2 y 6.3.0 a 6.3.3 y 6.2.0 a 6.2.1 y 6.1.0 a 6.1.2 y 5.4.0 y 5.3.0 a 5.3.3 y 5.2.5 a 5.2.8 y 5.2.1 a 5.2.2 y 5.1.0 a 5.1.3 permite al atacante ejecutar código o comandos no autorizados a través de una solicitud de API."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"6.7.0","lessThanOrEqual":"6.7.4","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.3","versionType":"semver","status":"affected"},{"version":"5.2.5","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.2.1","lessThanOrEqual":"5.2.2","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-12T04:00:50.664894Z","id":"CVE-2023-40723","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.1.0","versionEndExcluding":"6.4.2","matchCriteriaId":"361CAA14-AE0D-492C-9B41-90E70D16BB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0","versionEndExcluding":"6.5.2","matchCriteriaId":"42604422-E5EC-47C9-B849-DA4BABB57358"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.0","versionEndExcluding":"6.6.4","matchCriteriaId":"0E7355FE-92CC-4E11-A738-5BF78B1F35E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndExcluding":"6.7.5","matchCriteriaId":"83920BC0-7B4A-4D86-89C0-5370D37CA7DB"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-117","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-42784","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:40.033","lastModified":"2026-06-17T06:24:29.723","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests."},{"lang":"es","value":"Un manejo inadecuado de una estructura sintácticamente no válida en Fortinet FortiWeb al menos en las versiones 7.4.0 a 7.4.6 y 7.2.0 a 7.2.10 y 7.0.0 a 7.0.10 permite a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP/S manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-11T16:10:51.450991Z","id":"CVE-2023-42784","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-228"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.7","matchCriteriaId":"FE224E36-1AE2-4F66-9B2F-8D1AD7F8A54A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-115","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-48790","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:40.227","lastModified":"2026-06-17T06:34:58.497","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthenticated attacker to execute unauthorized actions via crafted HTTP GET requests."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Request Forgery [CWE-352] en Fortinet FortiNDR versión 7.4.0, 7.2.0 a 7.2.1 y 7.1.0 a 7.1.1 y anteriores a 7.0.5 puede permitir que un atacante remoto no autenticado ejecute acciones no autorizadas a través de solicitudes HTTP GET manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-11T16:03:35.954580Z","id":"CVE-2023-48790","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.0","versionEndExcluding":"7.0.6","matchCriteriaId":"C41E06C7-CAA4-41C3-98CF-E8A277809E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndExcluding":"7.1.2","matchCriteriaId":"E01D5B72-84FE-491A-9CE4-103B3DD3A0BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.2","matchCriteriaId":"960E2185-DD32-44A1-BF36-9B9C02ABE650"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"086FE30C-813B-4990-BBDA-010CB3EBC6EA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-353","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-32123","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:41.353","lastModified":"2026-06-17T07:29:19.387","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2\r\n7.2.0 through 7.2.5 and 7.0.0 through 7.0.12 and 6.4.0 through 6.4.14 and 6.2.0 through 6.2.12 and 6.0.0 through 6.0.12 and 5.6.0 through 5.6.11 and 5.4.0 through 5.4.7 and 5.2.0 through 5.2.10 and 5.0.0 through 5.0.12 and 4.3.4 through 4.3.8 allows attacker to execute unauthorized code or commands via crafted CLI requests."},{"lang":"es","value":"La neutralización incorrecta múltiple de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') en Fortinet FortiManager, FortiAnalyzer versiones 7.4.0 a 7.4.2, 7.2.0 a 7.2.5 y 7.0.0 a 7.0.12 y 6.4.0 a 6.4.14 y 6.2.0 a 6.2.12 y 6.0.0 a 6.0.12 y 5.6.0 a 5.6.11 y 5.4.0 a 5.4.7 y 5.2.0 a 5.2.10 y 5.0.0 a 5.0.12 y 4.3.4 a 4.3.8 permite a los atacantes ejecutar código o comandos no autorizados a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:5.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:4.3.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:4.3.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:4.3.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:4.3.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:4.3.4:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.11","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.10","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.12","versionType":"semver","status":"affected"},{"version":"4.3.4","lessThanOrEqual":"4.3.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-12T04:00:46.416906Z","id":"CVE-2024-32123","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"FF6CA5B2-29DE-4FB3-8D7D-D248A593AB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"E6F162A7-0D01-43E0-99D8-D7B87B080853"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.5","versionEndExcluding":"7.2.8","matchCriteriaId":"17F350D2-FED3-4F8F-A41B-6B582A1920DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"C58AC0D2-C9BE-4E50-9C54-DD41D2DA16A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3.4","versionEndExcluding":"7.2.6","matchCriteriaId":"A15C289C-78E8-4322-8F1D-A6474B2936C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3AE9CAFD-5D5B-4799-8690-624225963595"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-24-124","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-33501","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:41.550","lastModified":"2026-06-17T07:31:52.353","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5, FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commands via specifically crafted CLI requests."},{"lang":"es","value":"Dos vulnerabilidades de neutralización incorrecta de elementos especiales utilizadas en un comando SQL ('SQL Injection') [CWE-89] en Fortinet FortiAnalyzer versión 7.4.0 a 7.4.2 y anteriores a 7.2.5, FortiManager versión 7.4.0 a 7.4.2 y anteriores a 7.2.5 y FortiAnalyzer-BigData versión 7.4.0 y anteriores a 7.2.7 permiten que un atacante privilegiado ejecute código o comandos no autorizados a través de solicitudes CLI específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.4","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.8","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.10","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-11T16:02:27.551606Z","id":"CVE-2024-33501","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"F07BE2AB-5F28-4773-B9C3-1D76EA1C2D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.5","versionEndExcluding":"7.2.8","matchCriteriaId":"17F350D2-FED3-4F8F-A41B-6B582A1920DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"80598594-A45A-4E69-B968-1DD3DBD30FF9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.10","versionEndIncluding":"6.0.12","matchCriteriaId":"404DB65F-81AD-4BC3-9BCB-A5DDDB523C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.8","versionEndExcluding":"7.2.6","matchCriteriaId":"B245AC4D-D945-4403-965C-8BCAC1ECD63C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-130","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45324","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:41.743","lastModified":"2026-06-17T07:54:01.720","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and before 7.0.19, FortiPAM version 1.4.0 through 1.4.2 and before 1.3.1, FortiSRA version 1.4.0 through 1.4.2 and before 1.3.1 and FortiWeb version 7.4.0 through 7.4.5, version 7.2.0 through 7.2.10 and before 7.0.10 allows a privileged attacker to execute unauthorized code or commands via specially crafted HTTP or HTTPS commands."},{"lang":"es","value":"Una vulnerabilidad de uso de cadena de formato controlada externamente [CWE-134] en FortiOS versión 7.4.0 a 7.4.4, versión 7.2.0 a 7.2.9, versión 7.0.0 a 7.0.15 y anteriores a 6.4.15, FortiProxy versión 7.4.0 a 7.4.6, versión 7.2.0 a 7.2.12 y anteriores a 7.0.19, FortiPAM versión 1.4.0 a 1.4.2 y anteriores a 1.3.1, FortiSRA versión 1.4.0 a 1.4.2 y anteriores a 1.3.1 y FortiWeb versión 7.4.0 a 7.4.5, versión 7.2.0 a 7.2.10 y anteriores a 7.0.10 permite a un atacante privilegiado ejecutar código o comandos no autorizados a través de comandos HTTP o HTTPS especialmente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.4.0","lessThanOrEqual":"1.4.2","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSRA","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisra:1.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisra:1.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisra:1.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.4.0","lessThanOrEqual":"1.4.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-12T04:00:51.960748Z","id":"CVE-2024-45324","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.17","matchCriteriaId":"BCCC7410-CFB4-4E3B-8B1D-8FAEDCBD46DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.16","matchCriteriaId":"B481963F-0415-42C8-BB38-C1A8BDF4B9F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.16","matchCriteriaId":"3EAE013D-7AE4-4C7A-81A0-296FE00F12CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"4D7D031B-221B-4738-AC83-4FB92A106528"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.3.1","matchCriteriaId":"A6AC9224-3994-4D38-B823-404AA8A2A854"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"1.4.3","matchCriteriaId":"6142E55A-E939-4E25-BFB3-D7C97FACAD62"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.20","matchCriteriaId":"1B14CD59-F557-48A0-8458-BECD3AD7DB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.13","matchCriteriaId":"EDC18768-0891-465E-9900-3DF5D22A5CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"5029368F-7632-40BF-87A8-202FB3B3A571"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C1A9E35E-AA55-44C4-BAAC-2E44E6DCE2EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"7E739890-CFEA-4B7B-B78D-8CC8157BDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"B642678E-4E31-4A6B-A791-ACD5D332B175"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"4C1BD145-AA4F-4264-B996-1BEC7B282EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"28B43375-DA74-4C5F-BAEE-39F312EEF51F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisra:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"1.4.3","matchCriteriaId":"4E56CAA8-088C-4116-9C3B-A2E53A2BB82B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-325","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45328","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:41.963","lastModified":"2026-06-17T07:54:02.283","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu."},{"lang":"es","value":"Una vulnerabilidad de autorización incorrecta [CWE-863] en FortiSandbox 4.4.0 a 4.4.6 puede permitir que un administrador con pocos privilegios ejecute comandos CLI elevados a través del menú de la consola GUI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-12T04:00:57.219257Z","id":"CVE-2024-45328","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.7","matchCriteriaId":"2DB040DB-3A14-40ED-A79A-751E415CF496"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-261","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-46663","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:42.130","lastModified":"2026-06-17T07:55:40.920","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer de pila [CWE-121] en Fortinet FortiMail CLI versión 7.6.0 a 7.6.1 y anteriores a 7.4.3 permite que un atacante privilegiado ejecute código o comandos arbitrarios a través de comandos CLI específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-12T04:00:59.848767Z","id":"CVE-2024-46663","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.7","matchCriteriaId":"74AF12D9-13B8-4849-A974-5C9B208BB02F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"187F5F30-2F5C-4E5B-9FED-F46D89D67D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"F48F8EA0-53FE-41F3-8C6E-169B8CE6FBD7"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-331","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52960","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:42.813","lastModified":"2026-06-17T08:07:55.723","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0 through 4.4.6 and before 4.2.7 allows an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests."},{"lang":"es","value":"Una aplicación del lado del cliente de una vulnerabilidad de seguridad del lado del servidor [CWE-602] en Fortinet FortiSandbox versión 5.0.0, 4.4.0 a 4.4.6 y anteriores a 4.2.7 permite que un atacante autenticado con al menos permiso de solo lectura ejecute comandos no autorizados a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.6","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.7","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-11T16:02:32.647649Z","id":"CVE-2024-52960","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-602"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"4.2.8","matchCriteriaId":"B523E946-A6A9-44B3-BF63-887C564B9B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.7","matchCriteriaId":"2DB040DB-3A14-40ED-A79A-751E415CF496"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A76F978E-2082-45A0-93FE-107B0BAFE0C3"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-305","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52961","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:42.960","lastModified":"2026-06-17T08:07:55.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0, FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2.1 through 4.2.7, FortiSandbox 4.0.0 through 4.0.5, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions allows an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo [CWE-78] en Fortinet FortiSandbox versión 5.0.0, 4.4.0 a 4.4.7, 4.2.0 a 4.2.7 y anteriores a 4.0.5 permite que un atacante autenticado con al menos permiso de solo lectura ejecute comandos no autorizados a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.6","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.7","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.5","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-12T04:00:58.549004Z","id":"CVE-2024-52961","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"4.0.6","matchCriteriaId":"145ED28B-323B-4B4C-8E88-98FDBDAA86E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.8","matchCriteriaId":"A19FD0B7-EB27-4118-944C-BF38648A7A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.7","matchCriteriaId":"2DB040DB-3A14-40ED-A79A-751E415CF496"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A76F978E-2082-45A0-93FE-107B0BAFE0C3"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-306","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-54018","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:43.113","lastModified":"2026-06-17T08:09:41.027","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an OS Command vulnerabilities [CWE-78] in FortiSandbox before 4.4.5 allows a privileged attacker to execute unauthorized commands via crafted requests."},{"lang":"es","value":"Múltiples vulnerabilidades de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo [CWE-78] en FortiSandbox anterior a 4.4.5 permiten que un atacante privilegiado ejecute comandos no autorizados a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.4","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-12T04:00:47.790662Z","id":"CVE-2024-54018","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"4.4.6","matchCriteriaId":"688272AF-8646-4076-BED7-001CDBA1EB2F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-110","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-54026","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:43.307","lastModified":"2026-06-17T08:09:41.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbox Cloud 24.1 allows attacker to execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando sql ('sql injection') en Fortinet FortiSandbox Cloud versión 23.4, FortiSandbox al menos 4.4.0 a 4.4.6 y 4.2.0 a 4.2.7 y 4.0.0 a 4.0.5 y 3.2.0 a 3.2.4 y 3.1.0 a 3.1.5 y 3.0.0 a 3.0.7 permite a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.6","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxcloud:24.1:*:*:*:*:*:*:*"],"versions":[{"version":"24.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-11T16:02:30.152318Z","id":"CVE-2024-54026","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"4.4.7","matchCriteriaId":"5D280A54-5CA3-4721-897D-24F5EC53BBA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:24.1:*:*:*:*:*:*:*","matchCriteriaId":"D1CD35DA-04DD-43F7-8DEE-3280A2DB46EE"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-353","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-55590","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:43.650","lastModified":"2026-06-17T08:11:17.243","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version 2.4.0 through 2.4.5 allows an authenticated attacker with at least read-only admin permission and CLI access to execute unauthorized code via specifically crafted CLI commands."},{"lang":"es","value":"Las vulnerabilidades de neutralización incorrecta múltiple de elementos especiales utilizados en un comando del SO ('inyección de comando del SO') [CWE-78] en Fortinet FortiIsolator versión 2.4.0 a 2.4.5 permiten que un atacante autenticado con al menos permiso de administrador de solo lectura y acceso CLI ejecute código no autorizado a través de comandos CLI específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiIsolator","defaultStatus":"unaffected","versions":[{"version":"2.4.0","lessThanOrEqual":"2.4.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-11T16:03:27.550889Z","id":"CVE-2024-55590","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndExcluding":"2.4.6","matchCriteriaId":"CE52CDEC-F555-44E8-84E7-3FB84C18FA16"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-178","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-55592","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:43.823","lastModified":"2026-06-17T08:11:17.580","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions, may allow an authenticated attacker to perform unauthorized operations on incidents via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de autorización incorrecta [CWE-863] en FortiSIEM 7.2 todas las versiones, 7.1 todas las versiones, 7.0 todas las versiones, 6.7 todas las versiones, 6.6 todas las versiones, 6.5 todas las versiones, 6.4 todas las versiones, 6.3 todas las versiones, 6.2 todas las versiones, 6.1 todas las versiones, 5.4 todas las versiones, 5.3 todas las versiones, puede permitir que un atacante autenticado realice operaciones no autorizadas en incidentes a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.9","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.5","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","baseScore":3.8,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-11T16:06:54.927466Z","id":"CVE-2024-55592","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"7.2.5","matchCriteriaId":"1E0EED76-B5F0-431B-992C-15CD5658A488"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-377","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-55597","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-11T15:15:44.010","lastModified":"2026-06-17T08:11:17.940","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted requests."},{"lang":"es","value":"Una limitación incorrecta de una ruta de acceso a un directorio restringido ('path traversal') en Fortinet FortiWeb versiones 7.0.0 a 7.6.0 permite a un atacante ejecutar código o comandos no autorizados a través de solicitudes manipuladas específicamente para este fin."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-11T16:02:35.296753Z","id":"CVE-2024-55597","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.6","matchCriteriaId":"57DC59F7-E14E-46A7-B1D9-8BA9DF9BED95"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"28B43375-DA74-4C5F-BAEE-39F312EEF51F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-439","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-26006","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-14T10:15:14.520","lastModified":"2026-06-17T07:16:54.410","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below web SSL VPN UI may allow a remote unauthenticated attacker to perform a Cross-Site Scripting attack via a malicious samba server."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web [CWE-79] en la interfaz de usuario web SSL VPN de FortiOS versión 7.4.3 y anteriores, versión 7.2.7 y anteriores, versión 7.0.13 y anteriores y FortiProxy versión 7.4.3 y anteriores, versión 7.2.9 y anteriores, versión 7.0.16 y anteriores puede permitir que un atacante remoto no autenticado realice un ataque de cross-site scripting a través de un servidor samba malicioso."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-15T03:55:21.520132Z","id":"CVE-2024-26006","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.14","matchCriteriaId":"E0BDC9CB-0462-456C-8AD3-C27DE15EFE22"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.17","matchCriteriaId":"C98BE382-7A23-4231-9D1B-5D7946848F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"EDFFA2C3-0A23-4884-B751-785BE598DFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3F2C29AD-A11F-4A5F-8BB0-8600D5F77E72"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-485","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40590","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-14T15:15:41.630","lastModified":"2026-06-17T07:46:08.323","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, version 6.0.15 and below when connecting to a FortiManager device, a FortiAnalyzer device, or an SMTP server may allow an unauthenticated attacker in a Man-in-the-Middle position to intercept on and tamper with the encrypted communication channel established between the FortiPortal and those endpoints."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta [CWE-295] en FortiPortal versión 7.4.0, versión 7.2.4 y anteriores, versión 7.0.8 y anteriores, versión 6.0.15 y anteriores al conectarse a un dispositivo FortiManager, un dispositivo FortiAnalyzer o un servidor SMTP puede permitir que un atacante no autenticado en una posición de intermediario intercepte y manipule el canal de comunicación cifrado establecido entre FortiPortal y esos endpoints."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T18:02:26.893187Z","id":"CVE-2024-40590","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"7CDBD415-E5CD-4608-811C-C970C4427F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"324378D9-B66F-490A-A3D6-96C05E13F0A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"957DAED4-8BE8-49A8-BEFA-2C419824895A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-22-155","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-46662","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-14T15:15:43.200","lastModified":"2026-06-17T07:55:40.817","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets"},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando ('inyección de comando') en Fortinet FortiManager versiones 7.4.1 a 7.4.3, FortiManager Cloud versiones 7.4.1 a 7.4.3 permite a los atacantes escalar privilegios a través de paquetes específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.1","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-15T03:55:28.287421Z","id":"CVE-2024-46662","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"7269FDB6-A1D4-4912-8751-87BA52614FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"164DEDC3-B1C0-42AC-9ADB-CE03CF6A71CC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-222","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-47573","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-14T15:15:43.363","lastModified":"2026-06-17T07:57:20.040","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted firmware image."},{"lang":"es","value":"Una vulnerabilidad de validación incorrecta del valor de verificación de integridad [CWE-354] en FortiNDR versión 7.4.2 y anteriores, versión 7.2.1 y anteriores, versión 7.1.1 y anteriores, versión 7.0.6 y anteriores puede permitir que un atacante autenticado con al menos permiso de lectura/escritura en mantenimiento del sistema instale una imagen de firmware dañada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T17:53:14.212011Z","id":"CVE-2024-47573","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-354"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.2","matchCriteriaId":"A083B022-481F-4C9C-BB84-7B97885BF7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"9CA704E7-0DED-4CF0-A6DE-705CD2BCC476"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-461","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-29059","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-14T16:15:27.027","lastModified":"2026-06-17T04:39:31.473","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb version 7.0.1 and below, 6.4.2 and below, 6.3.20 and below, 6.2.7 and below may allow a privileged attacker to execute SQL commands over the log database via specifically crafted strings parameters."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL ('SQL Injection') [CWE-89] en FortiWeb versión 7.0.1 y anteriores, 6.4.2 y anteriores, 6.3.20 y anteriores, 6.2.7 y anteriores puede permitir que un atacante privilegiado ejecute comandos SQL sobre la base de datos de registros a través de parámetros de cadenas específicamente manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.23","versionType":"semver","status":"affected"},{"version":"6.2.3","lessThanOrEqual":"6.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T17:49:57.286454Z","id":"CVE-2022-29059","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.3","versionEndIncluding":"6.2.7","matchCriteriaId":"6BEC9155-F85D-4E82-903C-001822686BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.3.18","matchCriteriaId":"35014331-8ACF-44BF-82B7-D11E7A8BE750"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.2","matchCriteriaId":"F6B93ABE-8620-4253-83C0-3D2228D20118"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"9054E8B0-2CF0-4DD3-8D5A-34C399F7C20D"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-140","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-33300","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-14T16:15:27.203","lastModified":"2026-06-17T06:01:31.777","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server  communication port."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando ('inyección de comando') en Fortinet FortiNAC 7.2.1 y anteriores, 9.4.3 y anteriores permite a un atacante un acceso limitado y no autorizado a archivos a través de una solicitud específicamente manipulada en el puerto de comunicación entre servidores."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC","defaultStatus":"unaffected","versions":[{"version":"9.4.0","lessThanOrEqual":"9.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T17:20:10.717955Z","id":"CVE-2023-33300","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"37ADB462-4770-4BBA-B289-845758ECA31D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*","versionStartIncluding":"9.4.0","versionEndExcluding":"9.4.4","matchCriteriaId":"FFAD3A27-5617-45F9-A870-D96A9193BA01"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-096","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-45588","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-14T16:15:27.570","lastModified":"2026-06-17T06:28:52.517","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An external control of file name or path vulnerability [CWE-73] in  FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process."},{"lang":"es","value":"Una vulnerabilidad de control externo de nombre de archivo o ruta [CWE-73] en el instalador de FortiClientMac versión 7.2.3 y anteriores, versión 7.0.10 y anteriores puede permitir que un atacante local ejecute código o comandos arbitrarios mediante la escritura de un archivo de configuración malicioso en /tmp antes de iniciar el proceso de instalación."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.6","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T17:35:03.137093Z","id":"CVE-2023-45588","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-73"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.6","versionEndExcluding":"7.0.11","matchCriteriaId":"9B1112E4-7DC3-41EA-9F78-57C80E109C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"A4E41723-27C8-484D-A3B6-384B08B4CE18"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-345","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-48785","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-14T16:15:27.733","lastModified":"2026-06-17T06:34:57.980","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the HTTPS communication channel between the FortiOS device, an inventory, and FortiNAC-F."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta [CWE-295] en FortiNAC-F versión 7.2.4 y anteriores puede permitir que un atacante remoto y no autenticado realice un ataque Man-in-the-Middle en el canal de comunicación HTTPS entre el dispositivo FortiOS, un inventario y FortiNAC-F."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC-F","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T17:13:32.966472Z","id":"CVE-2023-48785","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"10E94405-A4E7-4380-97A3-12FB8F997887"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-288","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40585","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-14T16:15:33.400","lastModified":"2026-06-17T07:46:07.773","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below and FortiAnalyzer version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below eventlog may allow any low privileged user with access to event log section to retrieve certificate private key and encrypted password logged as system log."},{"lang":"es","value":"Una inserción de información confidencial en las vulnerabilidades del archivo de registro [CWE-532] en FortiManager versión 7.4.0, versión 7.2.3 y anteriores, versión 7.0.8 y anteriores, versión 6.4.12 y anteriores, versión 6.2.11 y anteriores y FortiAnalyzer versión 7.4.0, versión 7.2.3 y anteriores, versión 7.0.8 y anteriores, versión 6.4.12 y anteriores, versión 6.2.11 y anteriores puede permitir que cualquier usuario con pocos privilegios y acceso a la sección del registro de eventos recupere la clave privada del certificado y la contraseña cifrada registrada como registro del sistema."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.12","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T17:48:18.315394Z","id":"CVE-2024-40585","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.0.9","matchCriteriaId":"D40E2F5B-2205-4B4D-9857-43B0B5E419DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"5BC35BBC-5F0C-4802-8F00-643D465D43E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DBBF7219-D15F-43C9-9A90-1A4B062431E4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.12","matchCriteriaId":"100385D7-CC33-4EA7-8DD1-DF0DB32C5598"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.13","matchCriteriaId":"026F23EC-447B-4813-B653-646DBE0CDF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"132220CA-1BB6-403D-AB3A-E21E05FF582A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"8E0D5DF6-69C6-4325-94D3-D7A44862F62C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"91A9AF01-72FD-4942-A95E-71A7609B6977"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-311","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-55594","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-14T17:15:48.653","lastModified":"2026-06-17T08:11:17.803","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests."},{"lang":"es","value":"Una gestión inadecuada de una estructura sintácticamente no válida en Fortinet FortiWeb al menos en las versiones 7.4.0 a 7.4.6 y 7.2.0 a 7.2.10 y 7.0.0 a 7.0.10 permite a un atacante ejecutar código o comandos no autorizados a través de solicitudes HTTP/S manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T16:57:33.359876Z","id":"CVE-2024-55594","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-228"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.7","matchCriteriaId":"FE224E36-1AE2-4F66-9B2F-8D1AD7F8A54A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-115","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-15706","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T14:15:15.107","lastModified":"2026-06-17T02:20:54.670","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0, version 1.2.9 and below and FortiOS version 6.2.1 and below, version 6.0.8 and below, version 5.6.12 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS)."},{"lang":"es","value":"Una neutralización incorrecta de la entrada durante la generación de páginas web en el portal VPN SSL de FortiProxy versión 2.0.0, versión 1.2.9 y anteriores y FortiOS versión 6.2.1 y anteriores, versión 6.0.8 y anteriores, versión 5.6.12 puede permitir que un atacante autenticado remoto realice un ataque de cross site scripting (XSS) almacenado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"2.0.0","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.8","versionType":"semver","status":"affected"},{"version":"5.6.12","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-17T13:53:23.673713Z","id":"CVE-2019-15706","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.9","matchCriteriaId":"73F1E981-42BC-476D-B041-889BE6EF654F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"5.6.13","matchCriteriaId":"ABFD64B3-F8CF-4E54-BF41-2098A28986D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.9","matchCriteriaId":"C2F4F708-941B-4EBD-9DAB-D726887B63DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.2","matchCriteriaId":"C41693AB-F242-42BC-91EE-70D4D0EC8B32"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-19-223","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-17659","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T14:15:16.360","lastModified":"2026-06-17T02:24:22.000","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user \"tunneluser\" by leveraging knowledge of the private key from another installation or a firmware image."},{"lang":"es","value":"Una vulnerabilidad en el uso de una clave criptográfica codificada en FortiSIEM versión 5.2.6 puede permitir que un atacante remoto no autenticado obtenga acceso SSH al supervisor como el usuario restringido \"tunneluser\" aprovechando el conocimiento de la clave privada de otra instalación o una imagen de firmware."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"5.2.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-17T13:35:01.135210Z","id":"CVE-2019-17659","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionEndExcluding":"5.2.7","matchCriteriaId":"C961C610-69DC-495B-BEA0-203F0A2AD0C1"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-19-296","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-6697","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T14:15:16.567","lastModified":"2026-06-17T02:39:31.973","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6 in the hostname parameter of a DHCP packet under DHCP monitor page may allow an unauthenticated attacker in the same network as the FortiGate to perform a Stored Cross Site Scripting attack (XSS) by sending a crafted DHCP packet."},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de entrada que afecta a FortiGate versiones 6.2.0 a 6.2.1, 6.0.0 a 6.0.6 en el parámetro de nombre de host de un paquete DHCP en la página de monitoreo DHCP puede permitir que un atacante no autenticado en la misma red que FortiGate realice un ataque de cross site scripting (XSS) almacenado enviando un paquete DHCP manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-17T14:19:08.113504Z","id":"CVE-2019-6697","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.7","matchCriteriaId":"A06EF27A-27FD-4C4D-8773-5A6217C6A6DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.2","matchCriteriaId":"C41693AB-F242-42BC-91EE-70D4D0EC8B32"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-184","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-29010","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T14:15:16.730","lastModified":"2026-06-17T03:10:58.350","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6.2.4 and below, version 6.0.10 and belowmay allow remote authenticated actors to read the SSL VPN events log entries of users in other VDOMs by  executing \"get vpn ssl monitor\" from the CLI. The sensitive data includes usernames, user groups, and IP address."},{"lang":"es","value":"La exposición de información confidencial a una vulnerabilidad de un agente no autorizado en FortiOS versión 6.2.4 y anteriores, y versión 6.0.10 y anteriores, podría permitir que agentes autenticados remotamente lean las entradas del registro de eventos de SSL VPN de usuarios en otros VDOM mediante la ejecución de \"get vpn ssl monitor\" desde la CLI. Los datos confidenciales incluyen nombres de usuario, grupos de usuarios y direcciones IP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.1","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-17T13:32:32.365720Z","id":"CVE-2020-29010","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.11","matchCriteriaId":"D44B5E8F-6093-4E84-9197-4530032E5B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.5","matchCriteriaId":"B59A39D6-9494-4273-8348-1078A77DD796"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-20-103","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-9295","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T14:15:16.903","lastModified":"2026-06-17T03:27:43.167","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately detect certain types of malformed or non-standard RAR archives, potentially containing malicious files. Based on the samples provided, FortiClient will detect the malicious files upon trying extraction by real-time scanning and FortiGate will detect the malicious archive if Virus Outbreak Prevention is enabled."},{"lang":"es","value":"Es posible que FortiOS 6.2 con motor antivirus versión 6.00142 o inferior, FortiOS 6.4 con motor antivirus versión 6.00144 o inferior y FortiClient 6.2 con motor antivirus versión 6.00137 o inferior no detecten inmediatamente ciertos tipos de archivos RAR malformados o no estándar que podrían contener archivos maliciosos. Con base en las muestras proporcionadas, FortiClient detectará los archivos maliciosos al intentar extraerlos mediante análisis en tiempo real y FortiGate detectará el archivo malicioso si la Prevención de Brotes de Virus está activada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-17T14:23:16.479716Z","id":"CVE-2020-9295","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-358"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:*:*:*:*:*:*:*:*","versionEndExcluding":"6.00145","matchCriteriaId":"DCCD3895-4F7D-4D7B-89DE-D4AED1433E1B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.4.16","matchCriteriaId":"1FFF6B70-A217-4828-B5DC-2F943267729A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:antivirus_engine:*:*:*:*:*:*:*:*","versionEndExcluding":"6.00145","matchCriteriaId":"DCCD3895-4F7D-4D7B-89DE-D4AED1433E1B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.2.6","matchCriteriaId":"B35D7DF1-AE12-4830-8A78-CA922482F1EF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-20-037","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22126","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T14:15:17.067","lastModified":"2026-06-17T03:36:39.700","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point (Meru AP and FortiAP-U) as root using the default hard-coded username and password."},{"lang":"es","value":"Una vulnerabilidad en el uso de contraseña codificada de forma rígida en FortiWLC versión 8.5.2 y anteriores, versión 8.4.8 y anteriores, versión 8.3.3 a 8.3.2, versión 8.2.7 a 8.2.6 puede permitir que un atacante local autenticado se conecte al punto de acceso administrado (Meru AP y FortiAP-U) como root usando el nombre de usuario y la contraseña codificados de forma rígida predeterminados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLC","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiwlc:8.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.2.6:*:*:*:*:*:*:*"],"versions":[{"version":"8.5.0","lessThanOrEqual":"8.5.2","versionType":"semver","status":"affected"},{"version":"8.4.4","lessThanOrEqual":"8.4.8","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThanOrEqual":"8.4.2","versionType":"semver","status":"affected"},{"version":"8.3.2","lessThanOrEqual":"8.3.3","versionType":"semver","status":"affected"},{"version":"8.2.6","lessThanOrEqual":"8.2.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-18T03:55:17.682980Z","id":"CVE-2021-22126","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.5.3","matchCriteriaId":"72490572-39E2-4C8F-8542-3BBDEAA5613D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"0F711F5C-A695-4665-ADAE-81C2989F128A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.2.7:*:*:*:*:*:*:*","matchCriteriaId":"21CF6A81-992D-4980-94BA-9416E5D1BD13"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"28C337BE-93A1-4AC4-87D3-4F620A05AF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A0BAFB6C-FAF8-4157-B84A-30B8735A6492"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-20-147","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26087","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T14:15:17.247","lastModified":"2026-06-17T03:42:50.313","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 web interface may allow both authenticated remote attackers and non-authenticated attackers in the same network as the appliance to perform a stored cross site scripting attack (XSS) via injecting malicious payloads in different locations."},{"lang":"es","value":"Una neutralización incorrecta de la entrada durante la generación de páginas web en la interfaz web de FortiWLC versión 8.6.0, versión 8.5.3 y anteriores, versión 8.4.8 y anteriores, versión 8.3.3 puede permitir que tanto atacantes remotos autenticados como atacantes no autenticados en la misma red que el dispositivo realicen un ataque de cross site scripting (XSS) almacenado mediante la inyección de payloads maliciosos en diferentes ubicaciones."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLC","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiwlc:8.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.3:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.3","versionType":"semver","status":"affected"},{"version":"8.4.4","lessThanOrEqual":"8.4.8","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThanOrEqual":"8.4.2","versionType":"semver","status":"affected"},{"version":"8.3.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-17T13:52:44.840845Z","id":"CVE-2021-26087","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndIncluding":"8.4.2","matchCriteriaId":"CA4E2F85-BC33-477A-9E04-89D6A1523DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.4","versionEndExcluding":"8.5.4","matchCriteriaId":"6ACC86D0-8F8B-4F96-B871-B6C5EA408F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A0BAFB6C-FAF8-4157-B84A-30B8735A6492"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.6.0:*:*:*:*:*:*:*","matchCriteriaId":"18D7B164-2D5E-427E-81F4-6BBDA51131DC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-20-137","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32584","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T14:15:17.413","lastModified":"2026-06-17T03:53:13.040","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI functionality by just specifying the correct URL.  The vulnerability applies only to limited CGI resources and might allow the unauthorized party to access configuration details."},{"lang":"es","value":"Una vulnerabilidad de control de acceso indebido (CWE-284) en FortiWLC versión 8.6.0, 8.5.3 y anteriores, 8.4.8 y anteriores, 8.3.3 y anteriores, 8.2.7 a 8.2.4 y 8.1.3 podría permitir que un atacante remoto no autenticado acceda a ciertas áreas de la funcionalidad CGI de administración web simplemente especificando la URL correcta. Esta vulnerabilidad afecta únicamente a recursos CGI limitados y podría permitir que un tercero no autorizado acceda a los detalles de configuración."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWLC","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiwlc:8.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiwlc:8.1.3:*:*:*:*:*:*:*"],"versions":[{"version":"8.6.0","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.3","versionType":"semver","status":"affected"},{"version":"8.4.4","lessThanOrEqual":"8.4.8","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThanOrEqual":"8.4.2","versionType":"semver","status":"affected"},{"version":"8.3.0","lessThanOrEqual":"8.3.3","versionType":"semver","status":"affected"},{"version":"8.2.4","lessThanOrEqual":"8.2.7","versionType":"semver","status":"affected"},{"version":"8.1.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-17T13:37:19.143586Z","id":"CVE-2021-32584","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.3","versionEndExcluding":"8.5.4","matchCriteriaId":"C028C542-3792-4AF1-9FDE-B03FD6D6EAF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.6.0:*:*:*:*:*:*:*","matchCriteriaId":"18D7B164-2D5E-427E-81F4-6BBDA51131DC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-20-138","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-54027","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T14:15:19.613","lastModified":"2026-06-17T08:09:41.837","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and below, version 4.0.5 and below, version 3.2.4 and below, version 3.1.5 and below, version 3.0.7 to 3.0.5 may allow a privileged attacker with super-admin profile and CLI access to read sensitive data via CLI."},{"lang":"es","value":"Una vulnerabilidad de uso de clave criptográfica codificada de forma rígida [CWE-321] en FortiSandbox versión 4.4.6 y anteriores, versión 4.2.7 y anteriores, versión 4.0.5 y anteriores, versión 3.2.4 y anteriores, versión 3.1.5 y anteriores, versión 3.0.7 a 3.0.5 puede permitir que un atacante privilegiado con perfil de súper administrador y acceso CLI lea datos confidenciales a través de CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.0.5:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.6","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.7","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.5","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThanOrEqual":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.5","lessThanOrEqual":"3.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-18T03:55:16.302735Z","id":"CVE-2024-54027","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.5","versionEndExcluding":"4.0.6","matchCriteriaId":"A3817BAD-ED8D-4ED4-B366-2A27CD3B1922"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.8","matchCriteriaId":"A19FD0B7-EB27-4118-944C-BF38648A7A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.7","matchCriteriaId":"2DB040DB-3A14-40ED-A79A-751E415CF496"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A76F978E-2082-45A0-93FE-107B0BAFE0C3"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-327","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-17542","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:12.677","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2017-17545","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:13.370","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2017-17546","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:13.433","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2017-17547","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:13.490","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2017-17548","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:13.560","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-1358","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:13.633","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-9196","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:13.707","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-9197","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:13.777","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-9198","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:13.837","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-9199","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:13.903","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-9200","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:13.967","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-9201","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.023","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-9202","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.090","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-9203","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.150","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-9204","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.210","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2020-6645","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.297","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-43078","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.370","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-43079","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.440","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44173","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.493","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44174","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.560","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44175","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.620","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44780","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.687","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44781","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.760","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44782","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.823","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44783","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.880","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44784","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:14.950","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44785","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.010","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44786","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.070","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44787","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.130","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44788","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.193","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-44789","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.250","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-45863","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.320","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-45864","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.380","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-45865","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.433","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-47396","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.503","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-47397","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.563","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-47398","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.623","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-47399","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.687","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-47400","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.763","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-47401","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.830","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-47402","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.890","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-47403","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:15.950","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-47404","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:16.013","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-47405","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:16.077","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-45589","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:16.680","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-46719","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:16.743","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-46721","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:16.813","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-47535","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:16.877","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-50182","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:16.940","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-50183","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:16.993","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-50184","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.050","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-50185","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.110","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-56498","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.177","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-56499","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.243","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-56500","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.307","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-56501","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.367","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-56502","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.433","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-56503","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.493","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-56504","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.553","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-56505","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.610","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-56506","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.670","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-27760","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.740","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-27761","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.807","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-27762","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.863","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-27763","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.927","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-27764","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:17.990","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-27765","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:18.050","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-27766","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:18.107","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-27767","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:18.173","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-27768","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-17T23:15:18.237","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-47539","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-18T14:15:37.830","lastModified":"2026-06-17T06:32:51.883","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado en FortiMail versión 7.4.0 configurada con autenticación RADIUS y remote_wildcard habilitado puede permitir que un atacante remoto no autenticado evite el inicio de sesión de administrador a través de una solicitud HTTP manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-19T03:55:50.452939Z","id":"CVE-2023-47539","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"D88B2A69-846E-4AFB-9E00-EBDC2A7015D5"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-439","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-21760","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-18T14:15:38.297","lastModified":"2026-06-17T07:10:06.663","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet."},{"lang":"es","value":"Una vulnerabilidad de control inadecuado de generación de código ('Inyección de código') [CWE-94] en FortiSOAR Connector FortiSOAR 7.4 todas las versiones, 7.3 todas las versiones, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones puede permitir que un atacante autenticado ejecute código arbitrario en el host a través de un fragmento de código de libro de estrategias."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.3","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.7,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-18T14:14:53.853979Z","id":"CVE-2024-21760","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"7.4.5","matchCriteriaId":"C95E579B-17EB-4099-A62B-FB8473429416"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-420","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-16151","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-21T16:15:13.210","lastModified":"2026-06-17T02:21:46.470","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS 6.4.1 and below, 6.2.9 and below may allow a remote unauthenticated attacker to either redirect users to malicious websites via a crafted \"Host\" header or to execute JavaScript code in the victim's browser context.\r\nThis happens when the FortiGate has web filtering and category override enabled/configured."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web [CWE-79] en FortiOS 6.4.1 y anteriores, 6.2.9 y anteriores podría permitir que un atacante remoto no autenticado redirija a los usuarios a sitios web maliciosos mediante un encabezado \"Host\" manipulado o ejecute código JavaScript en el navegador de la víctima. Esto ocurre cuando FortiGate tiene habilitados o configurados el filtrado web y la anulación de categorías."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-21T16:21:55.938349Z","id":"CVE-2019-16151","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.10","matchCriteriaId":"8EE47BA6-6F1B-40E9-8FE5-5752389875DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"FECE2DC5-CFCC-4BA9-B416-4EB2C1E4D9BB"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-301","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26091","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-24T16:15:16.450","lastModified":"2026-06-17T03:42:50.777","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Based Encryption service of FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to infer parts of users authentication tokens and reset their credentials."},{"lang":"es","value":"El uso de una vulnerabilidad de generador de números pseudoaleatorios criptográficamente débil en el autenticador del servicio de cifrado basado en identidad de FortiMail 6.4.0 a 6.4.4 y 6.2.0 a 6.2.7 puede permitir que un atacante no autenticado infiera partes de los tokens de autenticación de los usuarios y restablezca sus credenciales."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.*:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThan":"6.2.*","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-31T18:11:46.513539Z","id":"CVE-2021-26091","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.4.5","matchCriteriaId":"E6ECDB5E-50A7-4E63-9F38-A7C58EF06C3F"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-031","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26105","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-24T16:15:16.610","lastModified":"2026-06-17T03:42:52.183","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below may allow an authenticated attacker to potentially execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en pila (CWE-121) en el analizador de perfiles de FortiSandbox versión 3.2.2 y anteriores, versión 3.1.4 y anteriores puede permitir que un atacante autenticado potencialmente ejecute código o comandos no autorizados a través de solicitudes HTTP específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","versions":[{"version":"3.2.2","status":"affected"},{"version":"3.1.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-31T18:19:30.591183Z","id":"CVE-2021-26105","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-358"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.4","matchCriteriaId":"CF14DBAC-6EA6-4B0A-B8F4-30FFE447B876"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"3.2.3","matchCriteriaId":"F485DCE0-8055-418B-A91D-F9D647F3BFD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0260B512-77CA-4FE8-A039-D7B287A19BAA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-20-234","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-25610","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-24T16:15:17.273","lastModified":"2026-06-17T05:41:36.590","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests."},{"lang":"es","value":"Una vulnerabilidad de suscripción de búfer ('desbordamiento de búfer') en la interfaz administrativa de Fortinet FortiOS versión 7.2.0 a 7.2.3, versión 7.0.0 a 7.0.6, versión 6.4.0 a 6.4.11 y versión 6.2.12 y anteriores, FortiProxy versión 7.2.0 a 7.2.2, versión 7.0.0 a 7.0.8, versión 2.0.12 y anteriores y FortiOS-6K7K versión 7.0.5, versión 6.4.0 a 6.4.10 y versión 6.2.0 a 6.2.10 y anteriores permite a un atacante remoto no autenticado ejecutar código o comandos arbitrarios a través de solicitudes específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.10","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS-6K7K","defaultStatus":"unaffected","versions":[{"version":"7.0.5","status":"affected"},{"version":"6.4.10","status":"affected"},{"version":"6.4.8","status":"affected"},{"version":"6.4.6","status":"affected"},{"version":"6.4.2","status":"affected"},{"version":"6.2.9","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.2.4","status":"affected"},{"version":"6.0.12","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"},{"version":"6.0.10","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.12","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"},{"version":"5.6.0","lessThanOrEqual":"5.6.14","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.13","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.15","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.10","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.22","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.7","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-24T16:26:39.771566Z","id":"CVE-2023-25610","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-124"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"6.1.4","matchCriteriaId":"A97E35C7-F21A-49B2-9135-D6FCB727FA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.8","matchCriteriaId":"42CE94E5-B32F-4253-B8AC-2CDB29CDD117"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.3.23","matchCriteriaId":"5154C61F-FC94-4D55-853D-22ECD0AD05CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.3","matchCriteriaId":"F2E8538B-42EF-4348-ADF2-78FF0977A1E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"B34855D1-69A4-4971-98B9-7AAF3E27A1F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"62EDCC39-DD0C-40B7-BA83-6D6FF944E19D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"90721212-587E-40B0-AF9A-3367DBC991EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"27F1D4EB-E172-4AE4-BF5E-B13D86B68E78"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"59494F87-7305-4531-B7C1-E9E50CDEC44F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"E16C1EC2-26C8-4A0A-AD05-6FBBAE64F996"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndExcluding":"7.0.9","matchCriteriaId":"F0DE96C2-C872-4A19-B50B-5AB66F3AAD63"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"2DE32DAA-88FE-4134-84CC-8C071F92D5F3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios-6k7k:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.4","versionEndExcluding":"6.2.13","matchCriteriaId":"2D70ED44-A7DA-4947-99EE-50AB77595E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios-6k7k:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.2","versionEndExcluding":"6.4.12","matchCriteriaId":"A611B0B5-1CB2-42EA-A100-FE587CA59A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios-6k7k:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"66265BCF-0AA4-4CE2-A096-6F3432EB834E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"6.2.13","matchCriteriaId":"445396AA-14A0-4C3A-BB6D-15F4907B9347"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.12","matchCriteriaId":"D4AA72D9-CD66-4628-92B5-6CDFCB8E0EEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.10","matchCriteriaId":"8EB54D85-8A3B-4F40-A814-3636F2AC99F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.12","matchCriteriaId":"2EA9BEAE-0403-48E2-A19D-AC27C32DD831"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.11","matchCriteriaId":"E5B3B630-5D4D-48AF-978F-5457AE98BBBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.12","matchCriteriaId":"142A4113-BEF9-4112-AC7D-757A18CFF2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"27A597D3-77FF-4BDA-A2BC-EDFFF96DDEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"407755AA-0C23-4C5B-88A2-8BC12A3D268D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.12","matchCriteriaId":"1C8A53DB-C3F6-4945-BE02-BED20AF19BDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.11","matchCriteriaId":"0C2DDF7D-F910-4016-8C51-4B54AAA8951C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.12","matchCriteriaId":"2B7F56A0-3940-43F1-9B29-45CE29043D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"930919B2-1DF9-4216-8245-8C0F3F137C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"319D2F9D-E1E5-49C7-8ABD-0A64D7B05D58"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-001","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-31105","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-27T04:15:27.447","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31106","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-27T04:15:28.007","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31107","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-27T04:15:28.073","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31108","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-27T04:15:28.140","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31109","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-27T04:15:28.717","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31110","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-27T04:15:28.787","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31111","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-27T04:15:29.310","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31112","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-27T04:15:29.427","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31113","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-27T04:15:29.493","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2019-16149","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-28T10:15:13.470","lastModified":"2026-06-17T02:21:46.203","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote attacker to execute unauthorized code by injecting malicious payload in the user profile of a FortiClient instance being managed by the vulnerable system."},{"lang":"es","value":"Una neutralización incorrecta de la entrada durante la generación de páginas web en FortiClientEMS versión 6.2.0 puede permitir que un atacante remoto ejecute código no autorizado al inyectar un payload malicioso en el perfil de usuario de una instancia de FortiClient administrada por el sistema vulnerable."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"6.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.3,"impactScore":3.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-28T14:30:25.215073Z","id":"CVE-2019-16149","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.1","matchCriteriaId":"50A10B70-D41C-4F77-8175-020BA82D73A5"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-19-072","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-24008","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-28T11:15:36.620","lastModified":"2026-06-17T03:39:08.880","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0, version 5.3.2 and below, version 5.2.0, version 5.1.0, version 5.0.0, version 4.7.0, version 4.6.0, version 4.5.0, version 4.4.2 and below, FortiDDoS-CM version 5.3.0, version 5.2.0, version 5.1.0, version 5.0.0, version 4.7.0, FortiVoice version 6.0.6 and below, FortiRecorder version 6.0.3 and below and FortiMail version 6.4.1 and below, version 6.2.4 and below, version 6.0.9 and below may allow a remote, unauthenticated attacker to obtain potentially sensitive software-version information by reading a JavaScript file."},{"lang":"es","value":"Una exposición de información sensible del sistema a una vulnerabilidad de esfera de control no autorizada [CWE-497] en FortiDDoS versión 5.4.0, versión 5.3.2 y anteriores, versión 5.2.0, versión 5.1.0, versión 5.0.0, versión 4.7.0, versión 4.6.0, versión 4.5.0, versión 4.4.2 y anteriores, FortiDDoS-CM versión 5.3.0, versión 5.2.0, versión 5.1.0, versión 5.0.0, versión 4.7.0, FortiVoice versión 6.0.6 y anteriores, FortiRecorder versión 6.0.3 y anteriores y FortiMail versión 6.4.1 y anteriores, versión 6.2.4 y anteriores, versión 6.0.9 y anteriores puede permitir que un atacante remoto no autenticado obtenga información potencialmente sensible de la versión del software leyendo un archivo JavaScript."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDDoS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortiddos:5.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:5.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.4.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.2","versionType":"semver","status":"affected"},{"version":"5.2.0","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"},{"version":"4.7.0","status":"affected"},{"version":"4.6.0","status":"affected"},{"version":"4.5.0","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","versions":[{"version":"1.5.0","lessThanOrEqual":"1.5.3","versionType":"semver","status":"affected"},{"version":"1.4.0","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiDDoS-CM","defaultStatus":"unaffected","versions":[{"version":"5.3.0","status":"affected"},{"version":"5.2.0","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"},{"version":"4.7.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-28T13:38:44.887350Z","id":"CVE-2021-24008","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.10","matchCriteriaId":"1F99B304-8B86-424C-8548-7DD5A0A901E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.5","matchCriteriaId":"C6896BC5-4B25-45DC-B3C5-8BB80E7C0694"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.2","matchCriteriaId":"747A8704-F9ED-4710-9B89-C11E49EA7484"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"5.4.3","matchCriteriaId":"E0DAD000-EF92-4833-9360-4E93D3597360"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.7","matchCriteriaId":"B6B81F4B-C56A-433B-B9AA-35E35031D711"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.4","matchCriteriaId":"C0899107-6CAD-40E6-827D-15A73CDB3953"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-cm:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"9137E599-E5EE-4A4E-ADCE-02842FC5C2FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-cm:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ABBCB00D-8C50-414E-8918-258EF062515D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-cm:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"82CCAFC5-D480-430A-902C-8B92D20AC09D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-cm:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D9301AAD-CDDE-4480-97A9-0C1EFF2EB31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-cm:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"01A0FC0C-A37F-450E-82F3-9B0C4C4752B6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-20-105","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-31367","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-29T04:15:24.037","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31368","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-29T04:15:29.740","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31369","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-29T04:15:38.600","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31370","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-29T04:15:38.677","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31371","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-29T04:15:38.813","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31372","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-29T04:15:38.950","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31373","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-29T04:15:39.090","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31374","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-29T04:15:39.340","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-33302","sourceIdentifier":"psirt@fortinet.com","published":"2025-03-31T15:15:41.680","lastModified":"2026-06-17T06:01:32.063","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer copy without checking size of input ('classic buffer overflow') in Fortinet  FortiMail webmail and administrative interface version 6.4.0 through 6.4.4 and before 6.2.6 and FortiNDR administrative interface version 7.2.0 and before 7.1.0 allows an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Una copia de búfer sin verificar el tamaño de entrada (\"desbordamiento de búfer clásico\") en el correo web FortiMail de Fortinet y la interfaz administrativa versión 6.4.0 a 6.4.4 y anteriores a 6.2.6 y la interfaz administrativa FortiNDR versión 7.2.0 y anteriores a 7.1.0 permite que un atacante autenticado con acceso regular al correo web provoque un desbordamiento de búfer y posiblemente ejecute código o comandos no autorizados a través de solicitudes HTTP específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","versions":[{"version":"7.2.0","status":"affected"},{"version":"7.1.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.3","versionType":"semver","status":"affected"},{"version":"1.4.0","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.1.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.10","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.12","versionType":"semver","status":"affected"},{"version":"5.3.12","lessThanOrEqual":"5.3.13","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.10","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.10","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.7","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-31T15:28:51.596601Z","id":"CVE-2023-33302","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.12","matchCriteriaId":"F55E66F3-2827-4707-9720-FBD56335B973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.11","matchCriteriaId":"98D4A72C-BD04-40D1-9561-BE46247CE338"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.7","matchCriteriaId":"FA33C194-BB9C-43C8-864C-15396010FAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.5","matchCriteriaId":"5DAB4EFB-D73F-4FC5-8FE7-278BADB9F78E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndExcluding":"7.2.1","matchCriteriaId":"3F262B16-971F-492A-9502-67D90DC25846"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-21-023","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-31515","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-01T03:15:17.700","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31516","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-01T03:15:18.140","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31517","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-01T03:15:18.210","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31518","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-01T03:15:18.283","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31519","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-01T03:15:18.350","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31520","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-01T03:15:18.420","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31521","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-01T03:15:18.490","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31522","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-01T03:15:18.557","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-31523","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-01T03:15:18.630","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-40714","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-02T08:15:13.530","lastModified":"2026-06-17T06:19:12.290","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege via uploading certain GUI elements"},{"lang":"es","value":"Un Path Traversal relativo en las versiones 7.0.0, 6.7.0 a 6.7.2, 6.6.0 a 6.6.3, 6.5.1 y 6.5.0 de Fortinet FortiSIEM permite a un atacante escalar privilegios mediante la carga de ciertos elementos de la GUI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.2","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":9.9,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.1,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-02T16:14:52.268463Z","id":"CVE-2023-40714","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.5.1","matchCriteriaId":"C994856C-4130-466C-AF0E-B82E170E1781"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.0","versionEndIncluding":"6.6.3","matchCriteriaId":"EB301503-0ECB-4D21-B341-ACF0F302CF85"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndIncluding":"6.7.3","matchCriteriaId":"793796C9-C300-4737-8275-52299FACAC21"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CAB28BA6-45B6-422B-9901-300B6024F703"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-085","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-37930","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T14:15:30.653","lastModified":"2026-06-17T06:08:55.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet  allows a VPN user to corrupt memory potentially leading to code or commands execution via specifically crafted requests."},{"lang":"es","value":"Varios problemas, incluido el uso de recursos no inicializados [CWE-908] y las vulnerabilidades de iteración excesiva [CWE-834] en Fortinet FortiOS SSL VPN webmode versión 7.4.0, versión 7.2.0 a 7.2.5, versión 7.0.1 a 7.0.11 y versión 6.4.7 a 6.4.14 y Fortinet FortiProxy SSL VPN webmode versión 7.2.0 a 7.2.6 y versión 7.0.0 a 7.0.12 permiten que un usuario de VPN corrompa la memoria, lo que potencialmente lleva a la ejecución de código o comandos a través de solicitudes específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-09T04:00:41.733448Z","id":"CVE-2023-37930","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-908"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.7","versionEndExcluding":"6.4.15","matchCriteriaId":"DC74FDEA-FB64-4516-8ADE-C99E14232121"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.0.13","matchCriteriaId":"6FB691B1-C64D-4A25-8FA4-61B0E13AF55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"3E323817-A339-48C3-B21A-851F1631F14B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"FE3D3235-9BBE-43F4-82B9-C51CED2F0DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"52D22E71-B3EE-4CF6-B6A2-297320861EC1"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-165","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-26013","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T14:15:30.863","lastModified":"2026-06-17T07:16:55.523","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9 and before 7.0.15, Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14 and before 6.2.13, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14 and before 6.2.13, Fortinet FortiVoice version 7.0.0 through 7.0.2 before 6.4.8 and Fortinet FortiWeb before 7.4.2 may allow an unauthenticated attacker in a man-in-the-middle position to impersonate the management device (FortiCloud server or/and in certain conditions, FortiManager), via intercepting the FGFM authentication request between the management device and the managed device"},{"lang":"es","value":"Vulnerabilidad de restricción indebida del canal de comunicación a los endpoints previstos [CWE-923] en Fortinet FortiOS versión 7.4.0 a 7.4.4, 7.2.0 a 7.2.8, 7.0.0 a 7.0.15, 6.4.0 a 6.4.15 y anteriores a 6.2.16, Fortinet FortiProxy versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.9 y anteriores a 7.0.15, Fortinet FortiManager versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.4, 7.0.0 a 7.0.11, 6.4.0 a 6.4.14 y anteriores a 6.2.13, Fortinet FortiAnalyzer versión 7.4.0 a 7.4.2, Las versiones 7.2.0 a 7.2.4, 7.0.0 a 7.0.11, 6.4.0 a 6.4.14 y anteriores a 6.2.13, Fortinet FortiVoice versión 7.0.0 a 7.0.2 anteriores a 6.4.8 y Fortinet FortiWeb anterior a 7.4.2 pueden permitir que un atacante no autenticado en una posición intermedia se haga pasar por el dispositivo de administración (servidor FortiCloud y/o en ciertas condiciones, FortiManager), al interceptar la solicitud de autenticación FGFM entre el dispositivo de administración y el dispositivo administrado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-09T04:00:43.225373Z","id":"CVE-2024-26013","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-923"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.14","matchCriteriaId":"56B15D54-021D-47E8-969C-7C98230ADCBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"34F71CF0-4C81-4261-BDA8-30287969D137"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"235896CC-EBDA-4787-9AC9-80B90E8FA55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"6F3D28A9-5CFD-4838-9630-D6E09FB63CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.14","matchCriteriaId":"398B5E77-7DB2-4223-92A2-E72279878C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"D2AD66B0-9C99-4F83-80AA-B54E6354ADFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"56DC03E9-D1CF-4273-AF2F-5EB3B8E2D54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4763E504-6974-42C5-B912-3E62A9CC312A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.16","matchCriteriaId":"FA0532A5-31F2-4A92-BF31-6003E28AC948"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"678EB0FA-2B29-4108-8378-C4803A543193"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"7.0.16","matchCriteriaId":"CD813AFF-5190-48A3-A0F8-F19C4D8EB716"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"EDFFA2C3-0A23-4884-B751-785BE598DFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"4A077234-F19C-4E87-A7A5-A266B5C903C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.9","matchCriteriaId":"C97B8181-C602-4E70-B3EA-CBE1FA62A220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"83F60EE7-4C70-415B-899C-8FCC1D35C156"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"B35B6E72-8578-4C35-80CF-66D0B74DAFC4"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-046","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-32122","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T14:15:31.040","lastModified":"2026-06-17T07:29:19.270","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server."},{"lang":"es","value":"El almacenamiento de contraseñas en un formato recuperable en las versiones 7.2.0 a 7.2.1 de Fortinet FortiOS permite a los atacantes divulgar información mediante la modificación de la IP del servidor LDAP para apuntar a un servidor malicioso."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-08T14:31:46.040059Z","id":"CVE-2024-32122","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-257"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.16","matchCriteriaId":"BB9D516D-E0DB-4A9D-B5AF-1DFFB61C91CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.17","matchCriteriaId":"E87C0DD6-A590-4E5E-8F63-481E15647BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.11","matchCriteriaId":"1E2C05DC-760B-4A39-8FC5-F485C28E34DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.7","matchCriteriaId":"037301E0-CE52-45FB-8BEB-A09D68EE9985"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-111","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2024-46671","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T14:15:31.740","lastModified":"2026-06-17T07:55:41.960","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and below widgets dashboard may allow an authenticated attacker with at least read-only admin permission to perform operations on the dashboard of other administrators via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de administración incorrecta de usuarios [CWE-286] en los widgets del panel de control de FortiWeb versión 7.6.2 y anteriores, versión 7.4.6 y anteriores, versión 7.2.10 y anteriores, versión 7.0.11 y anteriores puede permitir que un atacante autenticado con al menos permiso de administrador de solo lectura realice operaciones en el panel de control de otros administradores a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-08T14:28:42.465014Z","id":"CVE-2024-46671","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-286"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.11","matchCriteriaId":"3E3D4A84-295A-4CB9-8F4D-D7E30F7E747A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"F78CFE46-966D-4E2A-AF02-B8C1A2F74C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"A7FD2EFC-0161-4E00-A208-5AA893735ECC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-184","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-50565","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T14:15:31.920","lastModified":"2026-06-17T08:04:42.517","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15 and 6.2.0 through 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15 and 2.0.0 through 2.0.14, Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14 and 6.2.0 through 6.2.13, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14 and 6.2.0 through 6.2.13, Fortinet FortiVoice version 7.0.0 through 7.0.2, 6.4.0 through 6.4.8 and 6.0.0 through 6.0.12 and Fortinet FortiWeb version 7.4.0 through 7.4.2, 7.2.0 through 7.2.10, 7.0.0 through 7.0.10 allows an unauthenticated attacker in a man-in-the-middle position to impersonate the management device (FortiCloud server or/and in certain conditions, FortiManager), via intercepting the FGFM authentication request between the management device and the managed device"},{"lang":"es","value":"Vulnerabilidad de restricción indebida del canal de comunicación a los endpoints previstos [CWE-923] en Fortinet FortiOS versión 7.4.0 a 7.4.3, 7.2.0 a 7.2.7, 7.0.0 a 7.0.14, 6.4.0 a 6.4.15 y 6.2.0 a 6.2.16, Fortinet FortiProxy versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.9, 7.0.0 a 7.0.15 y 2.0.0 a 2.0.14, Fortinet FortiManager versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.4, 7.0.0 a 7.0.11, 6.4.0 a 6.4.14 y 6.2.0 a 6.2.17, 6.2.13, Fortinet FortiAnalyzer versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.4, 7.0.0 a 7.0.11, 6.4.0 a 6.4.14 y 6.2.0 a 6.2.13, Fortinet FortiVoice versión 7.0.0 a 7.0.2, 6.4.0 a 6.4.8 y 6.0.0 a 6.0.12 y Fortinet FortiWeb versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.10, 7.0.0 a 7.0.10 permite a un atacante no autenticado en una posición de intermediario hacerse pasar por el dispositivo de administración (servidor FortiCloud y/o en ciertas condiciones, FortiManager), al interceptar la solicitud de autenticación FGFM entre el dispositivo de administración y el dispositivo administrado"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":3.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-08T14:22:39.875619Z","id":"CVE-2024-50565","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-300"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"B35B6E72-8578-4C35-80CF-66D0B74DAFC4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.9","matchCriteriaId":"C97B8181-C602-4E70-B3EA-CBE1FA62A220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.3","matchCriteriaId":"83F60EE7-4C70-415B-899C-8FCC1D35C156"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"7.0.16","matchCriteriaId":"CD813AFF-5190-48A3-A0F8-F19C4D8EB716"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"EDFFA2C3-0A23-4884-B751-785BE598DFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"4A077234-F19C-4E87-A7A5-A266B5C903C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.16","matchCriteriaId":"FA0532A5-31F2-4A92-BF31-6003E28AC948"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"678EB0FA-2B29-4108-8378-C4803A543193"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.14","matchCriteriaId":"398B5E77-7DB2-4223-92A2-E72279878C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"D2AD66B0-9C99-4F83-80AA-B54E6354ADFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"56DC03E9-D1CF-4273-AF2F-5EB3B8E2D54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"4763E504-6974-42C5-B912-3E62A9CC312A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.2.14","matchCriteriaId":"56B15D54-021D-47E8-969C-7C98230ADCBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"34F71CF0-4C81-4261-BDA8-30287969D137"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"235896CC-EBDA-4787-9AC9-80B90E8FA55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"6F3D28A9-5CFD-4838-9630-D6E09FB63CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-046","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52962","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T14:15:32.097","lastModified":"2026-06-17T08:07:55.980","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.13 and below and FortiManager version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.12 and below may allow an unauthenticated remote attacker to pollute the logs via crafted login requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización de salida inadecuada para registros [CWE-117] en FortiAnalyzer versión 7.6.1 y anteriores, versión 7.4.5 y anteriores, versión 7.2.8 y anteriores, versión 7.0.13 y anteriores y FortiManager versión 7.6.1 y anteriores, versión 7.4.5 y anteriores, versión 7.2.8 y anteriores, versión 7.0.12 y anteriores puede permitir que un atacante remoto no autenticado contamine los registros a través de solicitudes de inicio de sesión manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-08T14:27:31.735344Z","id":"CVE-2024-52962","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-117"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"13E78BFE-04F0-4785-A2CD-62BADBE3930B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"2DCE77B0-0373-4EC1-8665-B18647FB0F81"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"24796E3A-DDCB-4949-9080-5DCEEECF0B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"241A8930-4ADA-4380-AA42-F10B28487595"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"7326FF2C-9D53-4B37-A0F2-E8481791A74B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"B83A0994-24C0-4F38-A181-B96C18E6CC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"A3705002-6335-464A-9E40-30E7C82081C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"DC9AD7A8-B390-4037-872B-02E1BEEDEC6C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-453","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-54024","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T14:15:32.303","lastModified":"2026-06-17T08:09:41.480","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator before version 2.4.6 allows a privileged attacker with super-admin profile and CLI access to execute unauthorized code via specifically crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del SO ('OS Command Injection') [CWE-78] en Fortinet FortiIsolator anterior a la versión 2.4.6 permite que un atacante privilegiado con perfil de súper administrador y acceso CLI ejecute código no autorizado a través de solicitudes HTTP específicamente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiIsolator","defaultStatus":"unaffected","versions":[{"version":"2.4.3","lessThanOrEqual":"2.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-09T04:00:39.955231Z","id":"CVE-2024-54024","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.3","versionEndExcluding":"2.4.7","matchCriteriaId":"B9293C91-E242-442D-AADA-9B6EE1D7874F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-397","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-54025","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T14:15:32.463","lastModified":"2026-06-17T08:09:41.590","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator CLI before version 2.4.6 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del SO ('OS Command Injection') [CWE-78] en Fortinet FortiIsolator CLI anterior a la versión 2.4.6 permite que un atacante privilegiado ejecute código o comandos no autorizados a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiIsolator","defaultStatus":"unaffected","versions":[{"version":"2.4.3","lessThanOrEqual":"2.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-09T04:00:38.302815Z","id":"CVE-2024-54025","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.3","versionEndExcluding":"2.4.7","matchCriteriaId":"B9293C91-E242-442D-AADA-9B6EE1D7874F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-392","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-22855","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T14:15:32.690","lastModified":"2026-06-17T08:50:36.490","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient before 7.4.1 may allow the EMS administrator to send messages containing javascript code."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('Cross-site Scripting') [CWE-79] en Fortinet FortiClient anterior a 7.4.1 puede permitir que el administrador de EMS envíe mensajes que contengan código javascript."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-08T14:45:39.245375Z","id":"CVE-2025-22855","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndIncluding":"7.2.10","matchCriteriaId":"8B35B82C-BC53-4C11-B5FC-717A0175BD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"962187B8-C4C4-41F3-9487-8061F983F505"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-344","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-25254","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T14:15:32.857","lastModified":"2026-06-17T09:00:34.260","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, 7.2 all versions, 7.0 all versions endpoint may allow an authenticated admin to access and modify the filesystem via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de limitación incorrecta de una ruta a un directorio restringido ('Path Traversal') [CWE-22] en FortiWeb versión 7.6.2 y anteriores, versión 7.4.6 y anteriores, 7.2 todas las versiones, 7.0 todas las versiones puede permitir que un administrador autenticado acceda y modifique el sistema de archivos a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-09T04:00:36.603176Z","id":"CVE-2025-25254","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.7","matchCriteriaId":"FE224E36-1AE2-4F66-9B2F-8D1AD7F8A54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"A7FD2EFC-0161-4E00-A208-5AA893735ECC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-474","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-48887","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-08T17:15:34.440","lastModified":"2026-06-17T07:58:58.503","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A  unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request"},{"lang":"es","value":"Una vulnerabilidad de cambio de contraseña no verificada en la GUI de Fortinet FortiSwitch puede permitir que un atacante remoto no autenticado cambie las contraseñas de administrador a través de una solicitud especialmente manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitch","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitch:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-09T04:00:34.789571Z","id":"CVE-2024-48887","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-620"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.15","matchCriteriaId":"1B371109-292C-4FCC-B15E-F16EE312BB13"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"5B11CFFF-42AB-40E5-8AA0-DCAB1364A2BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"038A829E-84FE-4B42-AE54-A6DE066EE59C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"47E81562-F1B3-4759-B046-DC343FD7651A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiswitch:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"31C81F91-69B3-4F98-9B5E-AD6C03E05638"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-435","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-32757","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:13.903","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32758","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.427","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32759","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.477","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32760","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.530","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32761","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.583","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32762","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.637","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32763","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.693","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32764","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.747","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32765","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.790","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32767","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.843","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32768","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.893","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32769","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.943","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32770","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:14.993","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32771","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:15.047","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32772","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:15.100","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32773","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:15.153","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32774","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:15.200","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32775","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-11T03:15:15.250","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32933","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-15T03:15:17.590","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32934","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-15T03:15:17.680","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32935","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-15T03:15:17.733","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32936","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-15T03:15:17.790","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32937","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-15T03:15:17.850","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32938","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-15T03:15:17.910","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32939","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-15T03:15:17.957","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32940","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-15T03:15:18.013","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-32941","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-15T03:15:18.077","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-26014","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-18T08:15:12.803","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-43893","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-19T03:15:14.017","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-43894","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-19T03:15:14.087","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-43895","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-19T03:15:14.147","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-43896","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-19T03:15:14.200","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-43897","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-19T03:15:14.253","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-43898","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-19T03:15:14.317","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-43899","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-19T03:15:14.367","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-43900","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-19T03:15:14.427","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-43901","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-19T03:15:14.487","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46216","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-23T03:15:22.333","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46217","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-23T03:15:22.403","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46218","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-23T03:15:22.457","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46219","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-23T03:15:22.520","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46220","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-23T03:15:22.570","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46221","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-23T03:15:22.630","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46222","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-23T03:15:22.687","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46223","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-23T03:15:22.747","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46224","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-23T03:15:22.800","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46374","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-24T03:15:15.797","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46375","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-24T03:15:15.867","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46376","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-24T03:15:15.917","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46377","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-24T03:15:15.973","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46378","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-24T03:15:16.033","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46379","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-24T03:15:16.083","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46380","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-24T03:15:16.140","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46381","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-24T03:15:16.197","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-32601","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-25T16:15:21.360","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2017-7740","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:33.353","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-13372","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:33.900","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46753","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:35.230","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46754","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:35.283","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46755","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:35.343","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46756","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:35.397","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46757","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:35.447","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46758","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:35.507","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46759","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:35.563","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46760","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:35.613","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46761","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-29T03:15:35.670","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46778","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-30T03:15:19.170","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46779","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-30T03:15:19.250","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46780","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-30T03:15:19.307","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46781","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-30T03:15:19.367","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46782","sourceIdentifier":"psirt@fortinet.com","published":"2025-04-30T03:15:19.430","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2021-43069","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T04:15:55.500","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-46716","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T04:16:07.767","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47296","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T04:16:19.840","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47297","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T04:16:23.400","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47298","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T04:16:23.463","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47299","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T04:16:23.523","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47300","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T04:16:23.587","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47301","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T04:16:23.643","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47302","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T04:16:23.700","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47303","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T04:16:23.763","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2018-1359","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-06T13:15:50.703","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47762","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-10T03:15:24.413","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47763","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-10T03:15:24.480","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47764","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-10T03:15:24.537","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47765","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-10T03:15:24.593","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47766","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-10T03:15:24.643","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47767","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-10T03:15:24.700","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47768","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-10T03:15:24.760","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47769","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-10T03:15:24.813","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47770","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-10T03:15:24.870","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47858","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-13T04:16:26.390","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47859","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-13T04:16:27.410","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47860","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-13T04:16:27.473","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47861","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-13T04:16:27.533","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47862","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-13T04:16:27.597","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47863","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-13T04:16:27.657","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47864","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-13T04:16:27.717","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-35281","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-13T15:15:52.060","lastModified":"2026-06-17T07:34:40.707","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop 3.0 all versions desktop application may allow an authenticated attacker to inject code via Electron environment variables."},{"lang":"es","value":"Una vulnerabilidad de aislamiento o compartimentación inadecuada [CWE-653] en la aplicación de escritorio FortiClientMac versión 7.4.2 y anteriores, versión 7.2.8 y anteriores, 7.0 todas las versiones y FortiVoiceUCDesktop 3.0 todas las versiones puede permitir que un atacante autenticado inyecte código a través de variables de entorno de Electron."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiVoiceUCDesktop","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThanOrEqual":"3.0.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":2.5,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-13T15:17:53.581796Z","id":"CVE-2024-35281","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-653"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.9","matchCriteriaId":"6C849529-C78C-4DE7-B2EA-FFF29FF9972F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"96EF5BCC-56D3-4218-80A2-085F8B63D83A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortifone_softclient:*:*:*:*:desktop:-:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.16","matchCriteriaId":"6CE41DB7-AA21-42E2-84E1-52C724DF54DB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-025","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-22859","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-13T15:15:54.293","lastModified":"2026-06-17T08:50:36.970","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allow a remote unauthenticated attacker to perform a limited arbitrary file write on the system via upload requests."},{"lang":"es","value":"Una vulnerabilidad de Path Traversal relativo [CWE-23] en FortiClientEMS 7.4.0 a 7.4.1 y FortiClientEMS Cloud 7.4.0 a 7.4.1 puede permitir que un atacante remoto no autenticado realice una escritura de archivo arbitraria limitada en el sistema a través de solicitudes de carga."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-13T15:17:35.244022Z","id":"CVE-2025-22859","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"962187B8-C4C4-41F3-9487-8061F983F505"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"94C5CE41-3023-4176-A719-9438D1C86563"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-552","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-32756","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-13T15:15:57.113","lastModified":"2026-06-17T09:12:32.723","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en pila [CWE-121] en Fortinet FortiVoice versiones 7.2.0, 7.0.0 a 7.0.6, 6.4.0 a 6.4.10, FortiRecorder versiones 7.2.0 a 7.2.3, 7.0.0 a 7.0.5, 6.4.0 a 6.4.5, FortiMail versiones 7.6.0 a 7.6.2, 7.4.0 a 7.4.4, 7.2.0 a 7.2.7, 7.0.0 a 7.0.8, FortiNDR versiones 7.6.0, 7.4.0 a 7.4.7, 7.2.0 a 7.2.4, 7.0.0 a 7.0.6, FortiCamera versiones 2.1.0 a 2.1.1, 2.1.2 a 2.1.3, 2.1.4 a 2.1.5, 2.1.6 a 2.1.7, 2.1.8 a 2.1.9, 2.1.1 a 2.1.19, 2.1.9 a 2.1.19, 2.1.1 a 2.1.29, 2.1.3 a 2.1.49, 2.1.4 a 2.1.59, 2.1.6 a 2.1.79, 2.1.8 a 2.1.89, 2.1.9 a 2.1.99, 2.1.9 a 2.1.19, 2.1.9 a 2.1.2 ... 2.1.3, 2.0 todas las versiones, 1.1 todas las versiones, permite a un atacante remoto no autenticado ejecutar código o comandos arbitrarios mediante el envío de solicitudes HTTP con cookies hash especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortindr:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.3","versionType":"semver","status":"affected"},{"version":"1.4.0","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiCamera","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticamera:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:2.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:2.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.1.0","lessThanOrEqual":"2.1.3","versionType":"semver","status":"affected"},{"version":"2.0.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-15T04:01:18.017087Z","id":"CVE-2025-32756","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-05-14","cisaActionDue":"2025-06-04","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"F05ACB93-42BC-43CD-845F-35FA9FE1D92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"8395970D-F937-4D1C-9FE1-90348F33FA94"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"3A40DE6A-D852-4B7E-BA67-B5DBBB3D427C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"F2F1655C-A21F-4FD3-875C-4E1DD8A7E178"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"039768AE-7C53-48E2-ADEE-77AE304B3D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"25383BFB-4CBE-4577-8AB7-4259D03B5B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"68F2B9B7-29FE-4CDD-8638-33CA947AB466"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0A64D6DA-FC2D-4411-9ADF-7103C0EA652E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"90B58E2B-7304-49FB-9454-ED9FFBCEE697"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9C0A1B68-65DC-4267-939A-216758809DC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EF813322-7AF8-4F9C-82D9-DBEF8888B97B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"86DD4A5F-260B-446D-8891-069A34D31760"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"888692FD-3219-49D3-898C-F4EA84CCC6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"874D4928-620B-42FE-8B19-C4314C46739A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9A1D8AE9-D9F9-402C-B8EB-58189200E0D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.6","matchCriteriaId":"A54116E5-DAA0-4D49-A2EE-FA9F9DF0D003"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"EF6B0F6E-6044-4F62-8AB5-A832A0554B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"55A5E420-BCAF-4399-9223-A4398760CD87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.11","matchCriteriaId":"408D5EE5-B951-4022-A4DF-0295A04899E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"58472BB4-2426-44B5-8D17-9C984EA567EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"76B48D4B-338A-4CEB-8712-6D880FF0F034"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:forticamera_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.1.3","matchCriteriaId":"6DBA20DC-B0EE-4FB7-9607-99EDFC4AA459"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:forticamera:-:*:*:*:*:*:*:*","matchCriteriaId":"CFB863FD-5593-4620-8740-4EB692EA58E1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:forticamera_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.5","matchCriteriaId":"A5FD90AB-29F2-40F1-8591-D046850906F7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:forticamera:-:*:*:*:*:*:*:*","matchCriteriaId":"CFB863FD-5593-4620-8740-4EB692EA58E1"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-254","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32756","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2025-47891","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-14T04:16:20.820","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47892","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-14T04:16:21.220","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47893","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-14T04:16:21.430","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47894","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-14T04:16:22.670","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47895","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-14T04:16:22.813","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47896","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-14T04:16:22.957","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47897","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-14T04:16:23.073","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47898","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-14T04:16:23.200","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47899","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-14T04:16:23.340","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48419","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-21T06:16:27.723","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48420","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-21T06:16:27.857","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48421","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-21T06:16:27.937","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48422","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-21T06:16:28.017","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48423","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-21T06:16:28.103","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48424","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-21T06:16:28.183","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48425","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-21T06:16:28.263","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48426","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-21T06:16:28.347","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48427","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-21T06:16:28.427","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48786","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-27T04:15:37.280","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48787","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-27T04:15:37.790","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48788","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-27T04:15:37.863","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48789","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-27T04:15:37.930","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48790","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-27T04:15:38.000","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48791","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-27T04:15:40.417","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48792","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-27T04:15:41.020","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48793","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-27T04:15:41.090","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48794","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-27T04:15:41.160","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-41839","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T04:15:31.777","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48841","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T04:15:46.770","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48842","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T04:15:47.390","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48843","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T04:15:49.640","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48844","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T04:15:49.917","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48845","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T04:15:49.990","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48846","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T04:15:50.067","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48847","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T04:15:50.140","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48848","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T04:15:50.207","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-54020","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T08:15:20.043","lastModified":"2026-06-17T08:09:41.253","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds via crafted update requests."},{"lang":"es","value":"Una autorización faltante en las versiones 7.2.0 a 7.2.1 y 7.0.0 a 7.0.7 de Fortinet FortiManager puede permitir que un atacante autenticado sobrescriba las fuentes de amenazas globales a través de solicitudes de actualización manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-28T14:21:24.497661Z","id":"CVE-2024-54020","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"F5248A7F-5122-4C07-8A4C-FE7A0BA07CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"C654DFBA-E3B0-4865-9088-13385A428E78"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-023","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-22252","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T08:15:21.070","lastModified":"2026-06-17T08:45:56.307","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and version 7.6.0 may allow an attacker with knowledge of an existing admin account to access the device as a valid admin via an authentication bypass."},{"lang":"es","value":"La falta de autenticación para una función crítica en Fortinet FortiProxy versiones 7.6.0 a 7.6.1, FortiSwitchManager versión 7.2.5 y FortiOS versiones 7.4.4 a 7.4.6 y versión 7.6.0 puede permitir que un atacante con conocimiento de una cuenta de administrador existente acceda al dispositivo como un administrador válido a través de una omisión de autenticación."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","versions":[{"version":"7.2.5","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.4","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-29T03:55:47.304655Z","id":"CVE-2025-22252","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C1A9E35E-AA55-44C4-BAAC-2E44E6DCE2EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:7.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8E5AF7C2-3954-4931-8929-7D1A3A9B4FAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.4","versionEndExcluding":"7.4.7","matchCriteriaId":"6E4A264B-EFE6-466C-8E86-3DA465C4751C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-472","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-24473","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T08:15:21.230","lastModified":"2026-06-17T08:59:05.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0.14 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if Windows is configured to accept incoming connections to port 8053 (non-default setup)"},{"lang":"es","value":"Una exposición de información confidencial del sistema a una esfera de control no autorizada en Fortinet FortiClientWindows versiones 7.2.0 a 7.2.1 puede permitir que un atacante remoto no autorizado vea información de la aplicación a través de la navegación a una página web alojada, si Windows está configurado para aceptar conexiones entrantes al puerto 8053 (configuración no predeterminada)"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.13:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.13","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-28T13:31:03.709587Z","id":"CVE-2025-24473","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-497"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"9E9DD222-9198-4E02-A086-2B24F06BBA53"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-548","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-25251","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T08:15:21.387","lastModified":"2026-06-17T09:00:33.870","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a local attacker to escalate privileges via crafted XPC messages."},{"lang":"es","value":"Una vulnerabilidad de autorización incorrecta [CWE-863] en FortiClient Mac 7.4.0 a 7.4.2, 7.2.0 a 7.2.8, 7.0.0 a 7.0.14 puede permitir que un atacante local escale privilegios a través de mensajes XPC manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-29T03:55:42.976511Z","id":"CVE-2025-25251","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.9","matchCriteriaId":"6C849529-C78C-4DE7-B2EA-FFF29FF9972F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"96EF5BCC-56D3-4218-80A2-085F8B63D83A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-016","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-46777","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T08:15:22.443","lastModified":"2026-06-17T09:26:56.447","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log."},{"lang":"es","value":"La inserción de información confidencial en un archivo de registro en las versiones 7.4.0, 7.2.0 a 7.2.5 y 7.0.0 a 7.0.9 de Fortinet FortiPortal puede permitir que un atacante autenticado con al menos permisos de administrador de solo lectura vea secretos cifrados a través del registro del sistema de FortiPortal. "}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-28T13:30:18.489150Z","id":"CVE-2025-46777","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.10","matchCriteriaId":"04BC3F4E-BCFF-4C13-9922-94BC08D55E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"BA765E03-8943-42BB-AACC-F3C918B8F2EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"957DAED4-8BE8-49A8-BEFA-2C419824895A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-380","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-47294","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T08:15:22.597","lastModified":"2026-06-17T09:27:41.080","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemon via a specially crafted request."},{"lang":"es","value":"Un desbordamiento de enteros o un error en las versiones 7.2.0 a 7.2.7 y 7.0.0 a 7.0.14 de Fortinet FortiOS puede permitir que un atacante remoto no autenticado bloquee el daemon csfd a través de una solicitud especialmente manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-28T14:12:54.651406Z","id":"CVE-2025-47294","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.15","matchCriteriaId":"C8185801-97AD-48F2-8275-A54D5D81C048"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-388","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-47295","sourceIdentifier":"psirt@fortinet.com","published":"2025-05-28T08:15:22.747","lastModified":"2026-06-17T09:27:41.197","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control."},{"lang":"es","value":"Una sobrelectura de búfer en las versiones 7.4.0 a 7.4.3, 7.2.0 a 7.2.7 y 7.0.0 a 7.0.14 de Fortinet FortiOS puede permitir que un atacante remoto no autenticado bloquee el daemon FGFM a través de una solicitud especialmente manipulada, en raras condiciones que están fuera del control del atacante. "}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-28T14:22:23.921855Z","id":"CVE-2025-47295","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-126"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.15","matchCriteriaId":"C8185801-97AD-48F2-8275-A54D5D81C048"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-381","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-49202","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-04T03:15:26.543","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49203","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-04T03:15:26.630","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49204","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-04T03:15:26.713","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49205","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-04T03:15:26.787","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49206","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-04T03:15:26.860","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49207","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-04T03:15:26.920","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49208","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-04T03:15:26.987","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49209","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-04T03:15:27.057","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49210","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-04T03:15:27.127","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-55595","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T03:15:38.093","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-29184","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:17:51.383","lastModified":"2026-06-17T05:49:33.857","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before  & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker to add SSH key files on the system silently via crafted CLI requests."},{"lang":"es","value":"Una vulnerabilidad de limpieza incompleta [CWE-459] en FortiOS 7.2 todas las versiones y anteriores y FortiProxy versión 7.2.0 a 7.2.2 y anteriores a 7.0.8 permite que un atacante con privilegios de VDOM agregue archivos de clave SSH en el sistema de manera silenciosa a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N","baseScore":3.2,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.5,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-11T14:43:14.775003Z","id":"CVE-2023-29184","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndExcluding":"7.0.9","matchCriteriaId":"F0DE96C2-C872-4A19-B50B-5AB66F3AAD63"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"2DE32DAA-88FE-4134-84CC-8C071F92D5F3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"7.2.11","matchCriteriaId":"933D9F29-BEEF-4C0C-AD46-899602F61BB6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-008","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-48786","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:18:40.720","lastModified":"2026-06-17T06:34:58.107","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated attacker to perform internal requests via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad de Server-side request forgery [CWE-918] en Fortinet FortiClientEMS versión 7.4.0 a 7.4.2 y anteriores a 7.2.6 puede permitir que un atacante autenticado realice solicitudes internas a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-11T14:43:35.642269Z","id":"CVE-2023-48786","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"F67F4416-C237-41A2-B7A4-2541EE60C972"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.13","matchCriteriaId":"91D4223F-37D4-45D7-A767-2AA8EDAC9AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"DF6B547F-6505-4838-BE1B-B0CED95FD371"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"962187B8-C4C4-41F3-9487-8061F983F505"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-342","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-32119","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:19:14.323","lastModified":"2026-06-17T07:29:19.150","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user's FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests."},{"lang":"es","value":"Una vulnerabilidad de autenticación incorrecta [CWE-287] en Fortinet FortiClientEMS versión 7.4.0 y anteriores a 7.2.4 permite que un atacante no autenticado con conocimiento del FCTUID y VDOM del usuario objetivo realice operaciones como cargar o etiquetar en nombre del usuario objetivo a través de solicitudes TCP especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.7","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.2.6","lessThanOrEqual":"6.2.9","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-10T19:29:57.527258Z","id":"CVE-2024-32119","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1390"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"46359866-6D0D-4479-A1E6-96EB1753DF6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.9","matchCriteriaId":"F67F4416-C237-41A2-B7A4-2541EE60C972"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.13","matchCriteriaId":"91D4223F-37D4-45D7-A767-2AA8EDAC9AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"C9FA0AB2-209D-4C5A-86E8-D5F88816CD60"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"22665641-9DD6-42BB-81E2-52E03153E114"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-375","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45329","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:19:25.083","lastModified":"2026-06-17T07:54:02.390","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may allow an authenticated attacker to view unauthorized device information via key modification in API requests."},{"lang":"es","value":"Una omisión de autorización a través de una clave controlada por el usuario en Fortinet FortiPortal versiones 7.4.0, 7.2.0 a 7.2.5 y 7.0.0 a 7.0.8 puede permitir que un atacante autenticado vea información no autorizada del dispositivo a través de la modificación de la clave en las solicitudes API."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-10T19:30:20.665281Z","id":"CVE-2024-45329","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"EB9E106C-E997-40D4-B368-1E9554E5A9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"BA765E03-8943-42BB-AACC-F3C918B8F2EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"957DAED4-8BE8-49A8-BEFA-2C419824895A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-274","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-50562","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:19:25.360","lastModified":"2026-06-17T08:04:42.127","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session has expired or was logged out."},{"lang":"es","value":"Una vulnerabilidad de expiración de sesión insuficiente [CWE-613] en FortiOS SSL-VPN versión 7.6.0, versión 7.4.6 y anteriores, versión 7.2.10 y anteriores, 7.0 todas las versiones, 6.4 todas las versiones puede permitir que un atacante en posesión de una cookie utilizada para iniciar sesión en el portal SSL-VPN inicie sesión nuevamente, aunque la sesión haya expirado o se haya cerrado la sesión."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.6","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.4.0","lessThanOrEqual":"1.4.1","versionType":"semver","status":"affected"},{"version":"1.3.0","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.20","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-10T19:30:09.729107Z","id":"CVE-2024-50562","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:24.4.60:*:*:*:-:*:*:*","matchCriteriaId":"2F69F805-E87B-4711-8B8F-ED4581534E8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.11","matchCriteriaId":"753664B2-3AE8-499A-9C8A-B7D928439697"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"26515743-5A9A-4885-A08E-535E4ABE0153"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-339","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2024-50568","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:19:25.660","lastModified":"2026-06-17T08:04:42.960","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy version 7.4.0 through 7.4.3, 7.2.0 through 7.2.9 and before 7.0.16 allows an unauthenticated attacker with the knowledge of device specific data to spoof the identity of a downstream device of the security fabric via crafted TCP requests."},{"lang":"es","value":"Un canal accesible por una vulnerabilidad que no es de endpoint [CWE-300] en Fortinet FortiOS versión 7.4.0 a 7.4.3, 7.2.0 a 7.2.7 y anteriores a 7.0.14 y FortiProxy versión 7.4.0 a 7.4.3, 7.2.0 a 7.2.9 y anteriores a 7.0.16 permite que un atacante no autenticado con conocimiento de datos específicos del dispositivo falsifique la identidad de un dispositivo descendente de la estructura de seguridad a través de solicitudes TCP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.2","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-10T18:49:34.421463Z","id":"CVE-2024-50568","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-300"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.17","matchCriteriaId":"C98BE382-7A23-4231-9D1B-5D7946848F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"EDFFA2C3-0A23-4884-B751-785BE598DFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3F2C29AD-A11F-4A5F-8BB0-8600D5F77E72"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.2","versionEndExcluding":"7.2.9","matchCriteriaId":"90353FD3-3CD3-4050-A04B-521A0E4741AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-058","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-54019","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:19:40.090","lastModified":"2026-06-17T08:09:41.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection."},{"lang":"es","value":"Una validación incorrecta del certificado con falta de coincidencia del host en Fortinet FortiClientWindows versión 7.4.0, versiones 7.2.0 a 7.2.6 y 7.0 todas las versiones permite que un atacante no autorizado redirija conexiones VPN a través de suplantación de DNS u otra forma de redirección."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-10T19:30:15.385270Z","id":"CVE-2024-54019","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-297"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.7","matchCriteriaId":"443F610D-2C24-4952-9493-07B7BCCC514F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:windows:*:*","matchCriteriaId":"6B512696-8596-4458-ADC9-24DD3C6C377B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-365","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-22251","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:21:08.117","lastModified":"2026-06-17T08:45:55.803","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to inject unauthorized sessions via crafted FGSP session synchronization packets."},{"lang":"es","value":"Una vulnerabilidad de restricción incorrecta del canal de comunicación a los endpoints previstos [CWE-923] en FortiOS 7.6.0, 7.4.0 a 7.4.5, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones puede permitir que un atacante no autenticado inyecte sesiones no autorizadas a través de paquetes de sincronización de sesión FGSP manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":3.1,"baseSeverity":"LOW","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-10T19:30:03.473366Z","id":"CVE-2025-22251","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-923"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"5249B7DB-E2BC-4EBD-9366-B25D1E24A012"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-287","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-22254","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:21:08.420","lastModified":"2026-06-17T08:45:56.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.6.0 through 7.6.1, FortiProxy 7.4.0 through 7.4.7, FortiWeb 7.6.0 through 7.6.1, FortiWeb 7.4.0 through 7.4.6 allows an authenticated attacker with at least read-only admin permissions to gain super-admin privileges via crafted requests to Node.js websocket module."},{"lang":"es","value":"Una vulnerabilidad de administración inadecuada de privilegios [CWE-269] que afecta a Fortinet FortiOS versión 7.6.0 a 7.6.1, 7.4.0 a 7.4.6, 7.2.0 a 7.2.10, 7.0.0 a 7.0.16 y anteriores a 6.4.15, FortiProxy versión 7.6.0 a 7.6.1 y anteriores a 7.4.7 y FortiWeb versión 7.6.0 a 7.6.1 y anteriores a 7.4.6 permite que un atacante autenticado con al menos permisos de administrador de solo lectura obtenga privilegios de superadministrador a través de solicitudes manipuladas al módulo websocket Node.js."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-11T04:01:45.546670Z","id":"CVE-2025-22254","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.16","matchCriteriaId":"B481963F-0415-42C8-BB38-C1A8BDF4B9F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.17","matchCriteriaId":"BD357034-B2FD-4C2E-97FE-2C54D686D885"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"4386465B-EFF9-41BA-B393-82135A2591DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"DE7A88C9-8466-4414-AECB-0689F23108CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"8563B77B-03AB-4ED2-BE70-DCF636FE0B60"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"AE578F21-0BE9-45BB-AE21-494308FF96B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"C6E32BEB-8804-452C-A054-DD9FFCC8B796"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"F78CFE46-966D-4E2A-AF02-B8C1A2F74C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"982B5FFC-F28C-4B81-BDDF-D9CA9F65D31E"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-006","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-22256","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:21:08.703","lastModified":"2026-06-17T08:45:57.310","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSRA 1.4.0 through 1.4.1 allows attacker to improper access control via specially crafted HTTP requests"},{"lang":"es","value":"Un manejo inadecuado de permisos o privilegios insuficientes en Fortinet FortiPAM 1.4.0 a 1.4.1, 1.3.0, 1.2.0, 1.1.0 a 1.1.2, 1.0.0 a 1.0.3, FortiSRA 1.4.0 a 1.4.1 permite a los atacantes un control de acceso indebido a través de solicitudes HTTP especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.4.0","lessThanOrEqual":"1.4.1","versionType":"semver","status":"affected"},{"version":"1.3.0","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSRA","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisra:1.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisra:1.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.4.0","lessThanOrEqual":"1.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-10T19:29:52.515467Z","id":"CVE-2025-22256","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-280"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.4","matchCriteriaId":"BA76D382-1793-4C03-9FCC-4B26559024A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndExcluding":"1.1.3","matchCriteriaId":"33C90C28-CAC2-4B7F-BB85-7CBF4B90862B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"1.4.2","matchCriteriaId":"F7478E22-F7E2-4555-985F-14E55B1C66B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6D0927D1-F469-4344-B4C9-3190645F5899"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3EBEF21B-B42C-40FD-8D74-DA9522C1008E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisra:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"1.4.2","matchCriteriaId":"AC7A680E-F869-4C2D-8285-F9E12FAB6994"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-008","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-24471","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:21:16.277","lastModified":"2026-06-17T08:59:04.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked certificate."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta [CWE-295] en FortiOS versión 7.6.1 y anteriores, versión 7.4.7 y anteriores puede permitir que un usuario remoto verificado por EAP se conecte desde FortiClient a través de un certificado revocado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-10T18:57:36.910049Z","id":"CVE-2025-24471","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:25.1.39:*:*:*:-:*:*:*","matchCriteriaId":"77B84900-E96D-4E2C-8797-B1460E71874E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"26515743-5A9A-4885-A08E-535E4ABE0153"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"8563B77B-03AB-4ED2-BE70-DCF636FE0B60"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-544","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-25250","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:21:16.550","lastModified":"2026-06-23T13:16:36.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiSASE 25.1.c may allow an authenticated user to access full SSL-VPN settings via crafted URL."},{"lang":"es","value":"Una vulnerabilidad de exposición de información confidencial a un actor no autorizado [CWE-200] en FortiOS versión 7.6.0, versión 7.4.7 y anteriores, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones. El modo web de SSL-VPN puede permitir que un usuario autenticado acceda a la configuración completa de SSL-VPN a través de una URL manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSASE","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisase:25.1.c:*:*:*:*:*:*:*"],"versions":[{"version":"25.1.c","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-11T14:42:58.904935Z","id":"CVE-2025-25250","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:25.1.75:*:*:*:-:*:*:*","matchCriteriaId":"ABDA3F6A-4983-404C-BAEF-9D86C635E722"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"2B680FFD-D548-4E53-877F-71E72C99E25E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-257","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-31104","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-10T17:21:22.873","lastModified":"2026-08-31T12:17:53.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 through 7.6.1, FortiADC 7.4.0 through 7.4.6, FortiADC 7.2.0 through 7.2.7, FortiADC 7.1.0 through 7.1.4, FortiADC 7.0 all versions, FortiADC 6.2 all versions, FortiADC 6.1 all versions, FortiADC 6.0 all versions, FortiADC 5.4 all versions, FortiADC 5.3 all versions, FortiADC 5.2 all versions, FortiADC 5.1 all versions, FortiADC 5.0 all versions, FortiADC 4.8 all versions, FortiADC 4.7 all versions, FortiADC 4.6 all versions, FortiADC 4.5 all versions, FortiADC 4.4 all versions, FortiADC 4.3 all versions, FortiADC 4.2 all versions, FortiADC 4.1 all versions, FortiADC 4.0 all versions, FortiADC 3.2 all versions, FortiADC 3.1 all versions, FortiADC 3.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando del SO ('inyección de comando del SO') [CWE-78] en FortiADC 7.6.0 a 7.6.1, 7.4.0 a 7.4.6, 7.2.0 a 7.2.7, 7.1.0 a 7.1.4, 7.0 todas las versiones, 6.2 todas las versiones, 6.1 todas las versiones puede permitir que un atacante autenticado ejecute código no autorizado a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:7.6.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.6.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.8:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:5.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.8.8:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.8.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.8.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.8.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.8.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.8.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.8.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.8.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.7.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.7.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.7.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.7.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.6.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.6.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.6.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.5.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.5.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.5.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.5.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.5.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.3.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.3.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.3.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:4.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:3.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:3.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:3.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:3.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:3.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.6","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.4.0","lessThanOrEqual":"5.4.5","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.7","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.7","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.4","versionType":"semver","status":"affected"},{"version":"4.8.3","lessThanOrEqual":"4.8.8","versionType":"semver","status":"affected"},{"version":"4.8.0","lessThanOrEqual":"4.8.1","versionType":"semver","status":"affected"},{"version":"4.7.0","lessThanOrEqual":"4.7.3","versionType":"semver","status":"affected"},{"version":"4.6.0","lessThanOrEqual":"4.6.2","versionType":"semver","status":"affected"},{"version":"4.5.0","lessThanOrEqual":"4.5.4","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.1","versionType":"semver","status":"affected"},{"version":"4.3.0","lessThanOrEqual":"4.3.2","versionType":"semver","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.3","versionType":"semver","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.1","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.2","versionType":"semver","status":"affected"},{"version":"3.1.0","status":"affected"},{"version":"3.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-11T04:01:46.632561Z","id":"CVE-2025-31104","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"7.1.5","matchCriteriaId":"76B80010-5154-4695-927C-D9E104D956F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"BA91E054-96EB-4F87-8132-0838D6F40F36"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"AE545405-6F6D-4B5F-929C-FE966F3C5FC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"7B0431F4-19A9-4D05-8290-16C5ABC149D3"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-099","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-49785","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-11T03:15:22.123","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49786","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-11T03:15:22.203","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49787","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-11T03:15:22.267","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49788","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-11T03:15:22.330","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49789","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-11T03:15:22.397","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49790","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-11T03:15:22.463","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49791","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-11T03:15:22.527","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49792","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-11T03:15:22.587","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49793","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-11T03:15:22.650","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-36636","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-12T03:15:25.653","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49814","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-12T03:15:25.863","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49815","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-12T03:15:25.930","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49816","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-12T03:15:25.993","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49817","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-12T03:15:26.060","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49818","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-12T03:15:26.130","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49819","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-12T03:15:26.190","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49820","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-12T03:15:26.253","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49821","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-12T03:15:26.313","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-49822","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-12T03:15:26.380","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-50142","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-14T03:15:21.693","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-50143","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-14T03:15:21.793","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-50144","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-14T03:15:21.860","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-50145","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-14T03:15:21.910","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-50146","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-14T03:15:21.977","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-50147","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-14T03:15:22.033","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-50148","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-14T03:15:22.097","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-50149","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-14T03:15:22.157","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-50150","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-14T03:15:22.220","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52437","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-17T03:15:25.127","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52438","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-17T03:15:25.203","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52439","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-17T03:15:25.280","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52440","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-17T03:15:25.347","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52441","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-17T03:15:25.410","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52442","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-17T03:15:25.477","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52443","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-17T03:15:25.547","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52444","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-17T03:15:25.607","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52445","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-17T03:15:25.673","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52971","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-24T03:15:34.947","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52972","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-24T03:15:35.027","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52973","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-24T03:15:35.090","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52974","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-24T03:15:35.147","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52975","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-24T03:15:35.210","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52976","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-24T03:15:35.270","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52977","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-24T03:15:35.333","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52978","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-24T03:15:35.393","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52979","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-24T03:15:35.453","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53157","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-27T04:15:46.420","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53158","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-27T04:15:50.040","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53159","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-27T04:15:50.637","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53160","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-27T04:15:52.530","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53161","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-27T04:15:54.820","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53162","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-27T04:15:54.897","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53163","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-27T04:15:54.987","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53164","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-27T04:15:55.077","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53165","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-27T04:15:55.547","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53166","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-27T04:15:55.620","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53380","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-28T03:15:24.373","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53381","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-28T03:15:25.393","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53382","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-28T03:15:25.470","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53383","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-28T03:15:25.563","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53384","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-28T03:15:25.630","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53385","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-28T03:15:25.710","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53386","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-28T03:15:25.790","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53387","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-28T03:15:25.860","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53388","sourceIdentifier":"psirt@fortinet.com","published":"2025-06-28T03:15:25.933","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53610","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T03:15:29.617","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53611","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T03:15:29.727","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53612","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T03:15:29.810","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53613","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T03:15:29.913","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53614","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T03:15:30.007","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53615","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T03:15:30.117","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53616","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T03:15:30.240","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53617","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T03:15:30.337","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-52965","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T15:15:22.313","lastModified":"2026-06-17T08:07:56.423","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.10, and before 7.0.16 & FortiProxy version 7.6.0 through 7.6.1, 7.4.0 through 7.4.8, 7.2.0 through 7.2.13 and before 7.0.20 allows an API-user using api-key + PKI user certificate authentication to login even if the certificate is invalid."},{"lang":"es","value":"Una vulnerabilidad de paso crítico faltante en la autenticación [CWE-304] en Fortinet FortiOS versión 7.6.0 a 7.6.1, 7.4.0 a 7.4.5, 7.2.0 a 7.2.10 y anteriores a 7.0.16 y FortiProxy versión 7.6.0 a 7.6.1, 7.4.0 a 7.4.8, 7.2.0 a 7.2.13 y anteriores a 7.0.20 permite que un usuario de API que utiliza autenticación de certificado de usuario PKI + clave de API inicie sesión incluso si el certificado no es válido."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.20","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-08T20:41:49.456616Z","id":"CVE-2024-52965","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-304"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.21","matchCriteriaId":"46624230-8C2A-4654-A576-7A7F43233EE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.14","matchCriteriaId":"16425D98-80A6-4CD4-8DBF-44C5D9E727A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"89DCD726-F323-49B8-9408-E3EF0591A480"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"C6E32BEB-8804-452C-A054-DD9FFCC8B796"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.0.17","matchCriteriaId":"C37D7999-642E-4119-8C0D-4B12ACB9E6FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"4386465B-EFF9-41BA-B393-82135A2591DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"199954FD-1280-46F8-8515-7591CE75A1E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FE8BFEA3-2949-4D91-B0D1-AB384851EC5C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-511","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-55599","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T15:15:23.870","lastModified":"2026-06-17T08:11:18.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions may allow a remote unauthenticated user to bypass the DNS filter via Apple devices."},{"lang":"es","value":"Una comprobación de seguridad implementada incorrectamente para la vulnerabilidad estándar [CWE-358] en FortiOS versión 7.6.0, versión 7.4.7 y anteriores, 7.0 todas las versiones, 6.4 todas las versiones y FortiProxy versión 7.6.1 y anteriores, versión 7.4.8 y anteriores, 7.2 todas las versiones, 7.0 todas las versiones puede permitir que un usuario remoto no autenticado evite el filtro DNS a través de dispositivos Apple."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.21","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-08T20:41:00.982835Z","id":"CVE-2024-55599","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-358"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"BE879BBE-A7E4-4F8F-9A64-C83A8A28A4D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"C6E32BEB-8804-452C-A054-DD9FFCC8B796"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:24.4.32:*:*:*:-:*:*:*","matchCriteriaId":"4D6D03F1-9422-46BF-8D49-743E89336272"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.11","matchCriteriaId":"753664B2-3AE8-499A-9C8A-B7D928439697"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"26515743-5A9A-4885-A08E-535E4ABE0153"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-053","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-24474","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-08T15:15:26.220","lastModified":"2026-06-17T08:59:05.180","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2 all versions, 7.0 all versions, 6.4 all versions; FortiManager Cloud 7.4.1 through 7.4.6, 7.2 all versions, 7.0 all versions, 6.4 all versions; FortiAnalyzer 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2 all versions, 7.0 all versions, 6.4 all versions; and FortiAnalyzer Cloud 7.4.1 through 7.4.6, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker with high privilege to extract database information via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando SQL ('Inyección SQL') [CWE-89] en FortiManager 7.6.0 a 7.6.1, 7.4.0 a 7.4.6, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones; FortiManager Cloud 7.4.1 a 7.4.6, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones; FortiAnalyzer 7.6.0 a 7.6.1, 7.4.0 a 7.4.6, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones; y FortiAnalyzer Cloud 7.4.1 a 7.4.6, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones puede permitir que un atacante autenticado con altos privilegios extraiga información de la base de datos a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-08T20:41:25.544728Z","id":"CVE-2025-24474","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"5CD897DB-50DB-420A-8DEB-E3D7FE52DBE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"DC9AD7A8-B390-4037-872B-02E1BEEDEC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.4.7","matchCriteriaId":"85C1E99D-083D-405B-8A84-111F8EACC3E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"5CF17E0A-30EF-4BF8-A17E-063BAE974A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"241A8930-4ADA-4380-AA42-F10B28487595"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.4.7","matchCriteriaId":"EE3F5121-7877-4BBD-8F07-F9B81B42C1E1"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-437","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53682","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-09T03:15:30.430","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53683","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-09T03:15:30.510","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53684","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-09T03:15:30.580","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53685","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-09T03:15:30.647","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53686","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-09T03:15:30.730","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53687","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-09T03:15:30.797","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53688","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-09T03:15:30.867","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53746","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-10T03:15:29.163","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53747","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-10T03:15:29.243","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53748","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-10T03:15:29.320","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53749","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-10T03:15:29.393","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53750","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-10T03:15:29.467","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53751","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-10T03:15:29.530","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53752","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-10T03:15:29.590","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53753","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-10T03:15:29.657","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53848","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-11T04:15:52.443","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53849","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-11T04:15:53.240","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53850","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-11T04:15:53.320","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53851","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-11T04:15:53.393","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53852","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-11T04:15:53.467","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53871","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-12T03:15:20.590","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53872","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-12T03:15:21.133","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53873","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-12T03:15:21.207","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53874","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-12T03:15:21.260","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53875","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-12T03:15:21.323","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53876","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-12T03:15:21.390","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53877","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-12T03:15:21.447","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53878","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-12T03:15:21.510","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53879","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-12T03:15:21.570","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-24477","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-15T09:15:22.267","lastModified":"2026-06-17T08:59:05.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.12 allows an attacker to escalate its privileges via a specially crafted CLI command"},{"lang":"es","value":"Un desbordamiento de búfer basado en montón en las versiones 7.6.0 a 7.6.2, 7.4.0 a 7.4.7 y 7.2.4 a 7.2.11 de Fortinet FortiOS permite a un atacante escalar sus privilegios a través de un comando CLI especialmente manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.4","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-15T13:10:06.251603Z","id":"CVE-2025-24477","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.4","versionEndExcluding":"7.2.12","matchCriteriaId":"9983FD26-F4F7-43AE-9015-4A83F0A6E238"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"26515743-5A9A-4885-A08E-535E4ABE0153"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"D6B883B9-9ECD-4BC5-B497-770F34F92473"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-026","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53952","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-16T03:15:21.837","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53953","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-16T03:15:22.410","lastModified":"2026-10-16T15:10:00.103","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53954","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-16T03:15:22.480","lastModified":"2026-10-16T15:10:00.103","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53955","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-16T03:15:22.547","lastModified":"2026-10-16T15:10:00.103","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53956","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-16T03:15:22.603","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53957","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-16T03:15:22.670","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-53958","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-16T03:15:22.727","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-25257","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-17T16:15:34.723","lastModified":"2026-06-17T09:00:34.647","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL ('Inyección SQL') [CWE-89] en Fortinet FortiWeb versión 7.6.0 a 7.6.3, 7.4.0 a 7.4.7, 7.2.0 a 7.2.10 y anteriores a 7.0.10 permite a un atacante no autenticado ejecutar código o comandos SQL no autorizados a través de solicitudes HTTP o HTTPS manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-18T03:55:34.282924Z","id":"CVE-2025-25257","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-07-18","cisaActionDue":"2025-08-08","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiWeb SQL Injection Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"7E739890-CFEA-4B7B-B78D-8CC8157BDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"B642678E-4E31-4A6B-A791-ACD5D332B175"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"CA8DE17C-1756-4B18-A956-A52CFA0967B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"2B739434-1979-43F9-AEC1-D287B1BCA5CA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-151","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://packetstorm.news/files/id/210193/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/52473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/0xbigshaq/CVE-2025-25257","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25257","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2024-27779","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-18T08:15:25.850","lastModified":"2026-06-17T07:20:16.897","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.0 all versions, 3.2 all versions and FortiIsolator version 2.4 and below, 2.3 all versions, 2.2 all versions, 2.1 all versions, 2.0 all versions, 1.2 all versions may allow a remote attacker in possession of an admin session cookie to keep using that admin's session even after the admin user was deleted."},{"lang":"es","value":"Una vulnerabilidad de expiración de sesión insuficiente [CWE-613] en FortiSandbox FortiSandbox versión 4.4.4 y anteriores, versión 4.2.6 y anteriores, 4.0 todas las versiones, 3.2 todas las versiones y FortiIsolator versión 2.4 y anteriores, 2.3 todas las versiones, 2.2 todas las versiones, 2.1 todas las versiones, 2.0 todas las versiones, 1.2 todas las versiones puede permitir que un atacante remoto en posesión de una cookie de sesión de administrador siga usando la sesión de ese administrador incluso después de que el usuario administrador haya sido eliminado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:3.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.4","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.6","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThanOrEqual":"3.2.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiIsolator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiisolator:2.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:1.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.4.0","lessThanOrEqual":"2.4.4","versionType":"semver","status":"affected"},{"version":"2.3.0","lessThanOrEqual":"2.3.4","versionType":"semver","status":"affected"},{"version":"2.2.0","status":"affected"},{"version":"2.1.0","lessThanOrEqual":"2.1.2","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.1","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":5.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-19T03:55:14.366116Z","id":"CVE-2024-27779","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"2.4.5","matchCriteriaId":"5FE46895-BF73-4346-900B-C9A7CD434028"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"3.2.0","versionEndExcluding":"4.2.7","matchCriteriaId":"6D8EBB53-DB08-44EA-9FE4-87801ACA2C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.5","matchCriteriaId":"2C77A903-42B3-41D3-BDC6-E138679B5400"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-035","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-32124","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-18T08:15:26.890","lastModified":"2026-06-17T07:29:19.593","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote authenticated read-only attacker to alter logs via a crafted HTTP request."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado [CWE-284] en el componente de registro de FortiIsolator versión 2.4.4, versión 2.4.3, 2.3 y todas las versiones puede permitir que un atacante remoto autenticado de solo lectura altere los registros a través de una solicitud HTTP manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiIsolator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiisolator:2.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.4.3","lessThanOrEqual":"2.4.4","versionType":"semver","status":"affected"},{"version":"2.3.0","lessThanOrEqual":"2.3.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-18T13:45:16.553405Z","id":"CVE-2024-32124","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndIncluding":"2.3.4","matchCriteriaId":"23294BAD-8A68-41FF-9C58-B525D8732B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.3","versionEndExcluding":"2.4.5","matchCriteriaId":"5333357F-9C1C-4122-A146-2181665A3B17"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-045","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-54354","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-22T03:15:28.070","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54355","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-22T03:15:28.163","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54356","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-22T03:15:28.220","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54357","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-22T03:15:28.283","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54358","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-22T03:15:28.343","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54359","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-22T03:15:28.407","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54360","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-22T03:15:28.460","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54361","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-22T03:15:28.520","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54362","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-22T03:15:28.580","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54661","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-29T03:15:22.170","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54662","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-29T03:15:22.340","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54663","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-29T03:15:22.407","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54664","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-29T03:15:22.473","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54665","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-29T03:15:22.540","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54666","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-29T03:15:22.607","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-41674","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-31T03:15:33.730","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54823","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-31T03:15:33.950","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54824","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-31T03:15:34.037","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54825","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-31T03:15:34.120","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54826","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-31T03:15:34.200","lastModified":"2025-07-31T03:15:34.200","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54827","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-31T03:15:34.287","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54828","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-31T03:15:34.370","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54829","sourceIdentifier":"psirt@fortinet.com","published":"2025-07-31T03:15:34.453","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54657","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-01T04:16:18.450","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54839","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-01T04:16:18.703","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54840","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-01T04:16:18.787","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54841","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-01T04:16:18.860","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54842","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-01T04:16:19.007","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54843","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-01T04:16:19.463","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54844","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-01T04:16:19.770","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54845","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-01T04:16:20.040","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54846","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-01T04:16:21.290","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54847","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-01T04:16:21.473","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54974","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-05T04:16:07.123","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54975","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-05T04:16:11.863","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54976","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-05T04:16:12.007","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54977","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-05T04:16:12.883","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54978","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-05T04:16:12.970","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54979","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-05T04:16:13.070","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-54980","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-05T04:16:13.150","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55019","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-06T04:16:19.447","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55020","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-06T04:16:19.550","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55021","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-06T04:16:19.633","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55022","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-06T04:16:19.717","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55023","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-06T04:16:19.793","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55024","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-06T04:16:19.873","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55025","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-06T04:16:19.950","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55026","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-06T04:16:20.030","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55027","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-06T04:16:20.113","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-45584","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:27.020","lastModified":"2026-06-17T06:28:51.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13 allows a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una vulnerabilidad de doble liberación [CWE-415] en Fortinet FortiOS versión 7.4.0, versión 7.2.0 a 7.2.5 y anteriores a 7.0.12, FortiProxy versión 7.4.0 a 7.4.1, versión 7.2.0 a 7.2.7 y anteriores a 7.0.13 y FortiPAM versión 1.1.0 a 1.1.2 y anteriores a 1.0.3 permite a un atacante privilegiado ejecutar código o comandos a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T15:04:28.411464Z","id":"CVE-2023-45584","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.13","matchCriteriaId":"44EB484E-505B-4DB2-86EC-17881A4F2674"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"3E323817-A339-48C3-B21A-851F1631F14B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61540F5B-080A-4D44-8BE0-75D7A0DCCB53"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.1.2","matchCriteriaId":"4D7A0B61-B88B-4C6B-994D-762BF2585F3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"86607BB0-08AB-4E78-913D-B783949D5C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"469D97BA-282C-4875-A156-FDA00B5B4093"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"B8AA0CE6-3E57-47D9-8318-215F0C4A2031"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-209","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-26009","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:27.230","lastModified":"2026-06-17T07:16:54.860","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions, FortiPAM 1.2.0, FortiPAM 1.1.0 through 1.1.2, FortiPAM 1.0.0 through 1.0.3, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.15, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number."},{"lang":"es","value":"Una vulnerabilidad de omisión de autenticación mediante una ruta o canal alternativo [CWE-288] en Fortinet FortiOS versión 6.4.0 a 6.4.15 y anteriores a 6.2.16, FortiProxy versión 7.4.0 a 7.4.2, 7.2.0 a 7.2.8 y anteriores a 7.0.15 y FortiPAM anterior a la versión 1.2.0 permite a un atacante no autenticado tomar el control de un dispositivo administrado a través de solicitudes FGFM manipuladas, si el dispositivo es administrado por un FortiManager y si el atacante conoce el número de serie de ese FortiManager."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.16","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T15:04:27.218508Z","id":"CVE-2024-26009","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"7A020C2E-1DDB-4737-92D9-B125FFBE007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"EB0D2553-E4E6-454A-80F6-9D014A4710D3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.16","matchCriteriaId":"D14FBA88-C364-4911-BBE8-E289139BF1AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"DF62C95E-AB35-4A8E-84F8-5197E9D33C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"4A077234-F19C-4E87-A7A5-A266B5C903C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.2.0","matchCriteriaId":"133A320C-2C5A-4E9D-A433-6C24F71A5FB0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.2.17","matchCriteriaId":"10332526-9457-4D1B-8AC1-60D6F7E749AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.16","matchCriteriaId":"B481963F-0415-42C8-BB38-C1A8BDF4B9F7"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-042","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-40588","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:27.397","lastModified":"2026-06-17T07:46:08.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions, FortiMail 7.6.0 through 7.6.1, FortiMail 7.4.0 through 7.4.3, FortiMail 7.2 all versions, FortiMail 7.0 all versions, FortiMail 6.4 all versions, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.6, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiRecorder 6.4 all versions, FortiVoice 7.0.0 through 7.0.3, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions may allow a privileged attacker to read files from the underlying filesystem via crafted CLI requests."},{"lang":"es","value":"Varias vulnerabilidades de path traversal relativa [CWE-23] en Fortinet FortiMail versión 7.6.0 a 7.6.1 y anteriores a 7.4.3, FortiVoice versión 7.0.0 a 7.0.5 y anteriores a 7.4.9, FortiRecorder versión 7.2.0 a 7.2.1 y anteriores a 7.0.4, FortiCamera y FortiNDR versión 7.6.0 y anteriores a 7.4.6 pueden permitir que un atacante privilegiado lea archivos del sistema de archivos subyacente a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiCamera","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticamera:2.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:2.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:2.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticamera:1.0.3:*:*:*:*:*:*:*"],"versions":[{"version":"2.1.0","lessThanOrEqual":"2.1.4","versionType":"semver","status":"affected"},{"version":"2.0.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.5","versionType":"semver","status":"affected"},{"version":"1.0.3","lessThanOrEqual":"1.0.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortindr:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-12T19:38:50.113803Z","id":"CVE-2024-40588","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:forticamera_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.1.4","matchCriteriaId":"92731966-B8E2-4AE4-8BC0-FA65DBE33D98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:forticamera:-:*:*:*:*:*:*:*","matchCriteriaId":"CFB863FD-5593-4620-8740-4EB692EA58E1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1D685B2E-54A0-4D38-B93C-752632C1290A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"F48F8EA0-53FE-41F3-8C6E-169B8CE6FBD7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.7","matchCriteriaId":"F9C702F2-89AB-43EA-99AD-BDA2ADE8AB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"3D2E2C35-DCD7-45AA-B70D-A92FA186285C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.5","matchCriteriaId":"152C9FCA-912A-4CE5-A3F7-3F3DE0F2825C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"C0B0D078-2F52-46B4-B9C0-162447828E1B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.10","matchCriteriaId":"BC0CF97D-D86C-4D83-B787-1E251FE73995"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"C22B8401-8893-474D-AB9E-42C3F2EF79CE"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-309","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-48892","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:27.567","lastModified":"2026-06-17T07:58:58.957","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability [CWE-23] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an authenticated attacker to read arbitrary files via uploading a malicious solution pack."},{"lang":"es","value":"Una vulnerabilidad de path traversal relativa [CWE-23] en FortiSOAR 7.6.0, 7.5.0 a 7.5.1, 7.4 todas las versiones, 7.3 todas las versiones puede permitir que un atacante autenticado lea archivos arbitrarios mediante la carga de un paquete de solución malicioso."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":4.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T19:54:21.184423Z","id":"CVE-2024-48892","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.5.2","matchCriteriaId":"AB556BB9-A061-45DD-AB46-C583B7CB5108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"447D83A6-18CF-4A24-9611-9E90A2F49097"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-421","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-52964","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:27.720","lastModified":"2026-06-17T08:07:56.280","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9 and below 7.0.13 & FortiManager Cloud version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5 and before 7.2.9 allows an authenticated remote attacker to overwrite arbitrary files via FGFM crafted requests."},{"lang":"es","value":"Una vulnerabilidad de limitación incorrecta de una ruta a un directorio restringido ('Path Traversal') [CWE-22] en Fortinet FortiManager versión 7.6.0 a 7.6.1, 7.4.0 a 7.4.5, 7.2.0 a 7.2.9 y anteriores a 7.0.13 y FortiManager Cloud versión 7.6.0 a 7.6.1, 7.4.0 a 7.4.5 y anteriores a 7.2.9 permite que un atacante remoto autenticado sobrescriba archivos arbitrarios a través de solicitudes manipuladas por FGFM."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T19:54:25.648289Z","id":"CVE-2024-52964","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.0.14","matchCriteriaId":"8E0FDFB4-BC58-4D1F-9469-85D20710551A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"E1A7E1FC-4049-47E8-9ACF-32B6C037B458"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"24796E3A-DDCB-4949-9080-5DCEEECF0B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"241A8930-4ADA-4380-AA42-F10B28487595"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndIncluding":"7.0.13","matchCriteriaId":"DFC22CA8-3D9C-44BC-8DB2-16F2CD78F114"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.10","matchCriteriaId":"1F83EAFC-BEF9-4358-BFF1-523023095643"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.6","matchCriteriaId":"6F663525-A2D6-40AB-905F-367B7E83054D"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-473","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-25248","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:28.530","lastModified":"2026-06-17T09:00:33.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de entero o envolvente [CWE-190] en FortiOS versión 7.6.2 y anteriores, versión 7.4.7 y anteriores, versión 7.2.10 y anteriores, 7.2 todas las versiones, 6.4 todas las versiones, FortiProxy versión 7.6.2 y anteriores, versión 7.4.3 y anteriores, 7.2 todas las versiones, 7.0 todas las versiones, 2.0 todas las versiones y FortiPAM versión 1.5.0, versión 1.4.2 y anteriores, 1.3 todas las versiones, 1.2 todas las versiones, 1.1 todas las versiones, 1.0 todas las versiones Los marcadores SSL-VPN RDP y VNC pueden permitir que un usuario autenticado afecte la disponibilidad de SSL-VPN del dispositivo a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.5.0","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.2","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.21","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T19:54:27.772972Z","id":"CVE-2025-25248","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.11","matchCriteriaId":"753664B2-3AE8-499A-9C8A-B7D928439697"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"26515743-5A9A-4885-A08E-535E4ABE0153"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"D6B883B9-9ECD-4BC5-B497-770F34F92473"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.4.3","matchCriteriaId":"6C39FBB2-E81C-4207-AFDD-080EC80F00A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0401C6C0-DC87-4728-873E-6DA489C859A8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"7.4.4","matchCriteriaId":"85275281-B082-4A93-9794-7625F8C205C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"50E93879-C162-4280-9687-89A4ADBB7287"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-364","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-25256","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:28.683","lastModified":"2026-08-18T21:16:32.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSIEM 7.3.0 through 7.3.1, FortiSIEM 7.2.0 through 7.2.5, FortiSIEM 7.1.0 through 7.1.7, FortiSIEM 7.0.0 through 7.0.3, FortiSIEM 6.7.0 through 6.7.9, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions, FortiSIEM 6.3 all versions, FortiSIEM 6.2 all versions, FortiSIEM 6.1 all versions, FortiSIEM 5.4 all versions, FortiSIEM 5.3 all versions, FortiSIEM 5.2 all versions, FortiSIEM 5.1 all versions, FortiSIEM 5.0 all versions, FortiSIEM 4.10 all versions, FortiSIEM 4.9 all versions, FortiSIEM 4.7 all versions allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del SO ('OS Command Injection') [CWE-78] en Fortinet FortiSIEM versión 7.3.0 a 7.3.1, 7.2.0 a 7.2.5, 7.1.0 a 7.1.7, 7.0.0 a 7.0.3 y anteriores a 6.7.9 permite que un atacante no autenticado ejecute código o comandos no autorizados a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:4.10.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:4.9.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:4.7.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.3.0","lessThanOrEqual":"7.3.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.9","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.5","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.2","versionType":"semver","status":"affected"},{"version":"5.4.0","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.3","versionType":"semver","status":"affected"},{"version":"5.2.5","lessThanOrEqual":"5.2.8","versionType":"semver","status":"affected"},{"version":"5.2.1","lessThanOrEqual":"5.2.2","versionType":"semver","status":"affected"},{"version":"5.1.0","lessThanOrEqual":"5.1.3","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.1","versionType":"semver","status":"affected"},{"version":"4.10.0","status":"affected"},{"version":"4.9.0","status":"affected"},{"version":"4.7.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-16T03:55:47.686767Z","id":"CVE-2025-25256","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndExcluding":"6.7.10","matchCriteriaId":"AE219A7C-15F6-42F1-8A2E-2D9C2D182F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"C19909A4-227B-460D-B1EF-5115B8DB0CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndExcluding":"7.1.8","matchCriteriaId":"119827CE-B8BF-4418-830F-B87CA0305265"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"8DBF861B-B200-40BA-86A3-51E90F3DCF04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.2","matchCriteriaId":"0A631305-1FA5-4CE8-B180-DC4BD6467A2F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-152","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.theregister.com/2025/08/13/fortinet_discloses_critical_bug/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://labs.watchtowr.com/should-security-solutions-be-secure-maybe-were-all-wrong-fortinet-fortisiem-pre-auth-command-injection-cve-2025-25256/","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2025-27759","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:28.957","lastModified":"2026-06-17T09:04:11.610","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and before 7.0.10 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI commands"},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del SO ('OS Command Injection') [CWE-78] en Fortinet FortiWeb versión 7.6.0 a 7.6.3, 7.4.0 a 7.4.7, 7.2.0 a 7.2.10 y anteriores a 7.0.10 permite que un atacante privilegiado autenticado ejecute código o comandos no autorizados a través de comandos CLI manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T15:04:25.989870Z","id":"CVE-2025-27759","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"7E739890-CFEA-4B7B-B78D-8CC8157BDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"B642678E-4E31-4A6B-A791-ACD5D332B175"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"CA8DE17C-1756-4B18-A956-A52CFA0967B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"2B739434-1979-43F9-AEC1-D287B1BCA5CA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-150","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-32766","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:29.107","lastModified":"2026-06-17T09:12:33.047","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or commands via crafted CLI commands"},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basada en pila [CWE-121] en Fortinet FortiWeb CLI versión 7.6.0 a 7.6.3 y anteriores a 7.4.8 permite que un atacante privilegiado ejecute código o comandos arbitrarios a través de comandos CLI manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T15:04:34.499487Z","id":"CVE-2025-32766","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.9","matchCriteriaId":"176B0C37-8A71-45C8-ABCC-1A07E06B5F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"2B739434-1979-43F9-AEC1-D287B1BCA5CA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-383","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-32932","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:29.260","lastModified":"2026-06-17T09:12:49.910","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 and below, version 7.5.1 and below, 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions WEB UI may allow an authenticated remote attacker to perform an XSS attack via stored malicious service requests"},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') [CWE-79] en FortiSOAR versión 7.6.1 y anteriores, versión 7.5.1 y anteriores, 7.4 todas las versiones, 7.3 todas las versiones, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones La interfaz web puede permitir que un atacante remoto autenticado realice un ataque XSS a través de solicitudes de servicio maliciosas almacenadas"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"},{"version":"6.4.3","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.3,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T19:54:23.450724Z","id":"CVE-2025-32932","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.5.2","matchCriteriaId":"40FFA8A7-EE33-48A9-AE52-40E8087ADF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"199DD7C5-D5B3-4B53-9BF0-DE974A092508"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-513","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-47857","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:29.997","lastModified":"2026-06-17T09:28:46.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or command via crafted CLI commands."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comando del sistema operativo') [CWE-78] en Fortinet FortiWeb CLI versión 7.6.0 a 7.6.3 y anteriores a 7.4.8 permite que un atacante privilegiado ejecute código o comando arbitrario a través de comandos CLI manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T15:04:24.865912Z","id":"CVE-2025-47857","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.9","matchCriteriaId":"176B0C37-8A71-45C8-ABCC-1A07E06B5F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"2B739434-1979-43F9-AEC1-D287B1BCA5CA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-253","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-49813","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:30.853","lastModified":"2026-06-17T09:31:57.067","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS Command (\"OS Command Injection\") vulnerability [CWE-78] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a remote and authenticated attacker with low privilege to execute unauthorized code via specifically crafted HTTP parameters."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en una vulnerabilidad de comando del sistema operativo (\"Inyección de comando del sistema operativo\") [CWE-78] en Fortinet FortiADC versión 7.2.0 y anteriores a 7.1.1 permite que un atacante remoto y autenticado con bajos privilegios ejecute código no autorizado a través de parámetros HTTP específicamente manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T15:04:31.926690Z","id":"CVE-2025-49813","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.6","matchCriteriaId":"F5275C5C-B6FD-4456-B143-ECDD282150C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndExcluding":"7.1.2","matchCriteriaId":"30963483-E0D5-4B71-B649-79194ACC77BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"74B0A112-AA30-4D11-8F36-3DC8A2EBCA16"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-501","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-52970","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:32.277","lastModified":"2026-11-06T11:17:00.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request."},{"lang":"es","value":"Un manejo inadecuado de los parámetros en Fortinet FortiWeb versiones 7.6.3 y anteriores, versiones 7.4.7 y anteriores, versiones 7.2.10 y anteriores, y 7.0.10 y anteriores puede permitir que un atacante remoto no autenticado con información no pública perteneciente al dispositivo y al usuario objetivo obtenga privilegios de administrador en el dispositivo a través de una solicitud especialmente manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-18T12:41:47.892664Z","id":"CVE-2025-52970","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-233"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.11","matchCriteriaId":"7E739890-CFEA-4B7B-B78D-8CC8157BDF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"B642678E-4E31-4A6B-A791-ACD5D332B175"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"CA8DE17C-1756-4B18-A956-A52CFA0967B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"2B739434-1979-43F9-AEC1-D287B1BCA5CA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-448","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://pwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-53744","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-12T19:15:35.113","lastModified":"2026-06-17T09:38:49.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions, may allow a remote authenticated attacker with high privileges to escalate their privileges to super-admin via registering the device to a malicious FortiManager."},{"lang":"es","value":"Una vulnerabilidad de asignación incorrecta de privilegios [CWE-266] en FortiOS Security Fabric versión 7.6.0 a 7.6.2, 7.4.0 a 7.4.7, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones, puede permitir que un atacante remoto autenticado con privilegios elevados escale sus privilegios a superadministrador mediante el registro del dispositivo en un FortiManager malicioso."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-13T15:04:30.745204Z","id":"CVE-2025-53744","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-266"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"2B680FFD-D548-4E53-877F-71E72C99E25E"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"D6B883B9-9ECD-4BC5-B497-770F34F92473"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-173","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-55718","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-15T03:15:35.017","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55719","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-15T03:15:35.630","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55720","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-15T03:15:35.703","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55721","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-15T03:15:35.780","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55722","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-15T03:15:35.853","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55723","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-15T03:15:35.930","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55724","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-15T03:15:36.000","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55725","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-15T03:15:36.077","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-55726","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-15T03:15:36.150","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57717","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-19T03:15:28.487","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57718","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-19T03:15:28.600","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57719","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-19T03:15:28.680","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57720","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-19T03:15:28.753","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57721","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-19T03:15:28.837","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57722","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-19T03:15:28.910","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57723","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-19T03:15:28.997","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57724","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-19T03:15:29.080","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57725","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-19T03:15:29.160","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57742","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-20T04:16:00.047","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57743","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-20T04:16:01.083","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57744","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-20T04:16:01.823","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57745","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-20T04:16:02.647","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57746","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-20T04:16:02.743","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57747","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-20T04:16:03.423","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57748","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-20T04:16:03.510","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57824","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-21T04:15:57.743","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57825","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-21T04:15:58.207","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57826","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-21T04:15:58.307","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57827","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-21T04:15:58.400","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57828","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-21T04:15:59.070","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57829","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-21T04:16:01.470","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57830","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-21T04:16:01.567","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57831","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-21T04:16:02.327","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-57832","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-21T04:16:02.410","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-22860","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:29.600","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-22861","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:29.727","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-22863","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:29.810","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-22864","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:29.883","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-24468","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:29.970","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-24469","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:30.043","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58035","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:30.483","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58036","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:30.557","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58037","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:30.630","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58038","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:30.703","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58039","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:30.783","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58040","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:30.860","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58041","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:30.933","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58042","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:31.010","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58043","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-23T03:15:31.090","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58326","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-29T03:15:39.497","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58327","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-29T03:15:39.600","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58328","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-29T03:15:39.680","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58329","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-29T03:15:39.753","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58330","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-29T03:15:39.837","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58331","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-29T03:15:39.910","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58332","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-29T03:15:39.987","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58333","sourceIdentifier":"psirt@fortinet.com","published":"2025-08-29T03:15:40.067","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58414","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-02T03:15:41.850","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58415","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-02T03:15:41.967","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58416","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-02T03:15:42.047","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58417","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-02T03:15:42.130","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58418","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-02T03:15:42.197","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58419","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-02T03:15:42.280","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58420","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-02T03:15:42.357","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58421","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-02T03:15:42.440","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58694","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-04T10:42:33.173","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58695","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-04T10:42:33.253","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58696","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-04T10:42:33.330","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58697","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-04T10:42:33.407","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58698","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-04T10:42:33.480","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58699","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-04T10:42:33.560","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58700","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-04T10:42:33.630","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58701","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-04T10:42:33.710","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58904","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-06T03:15:40.490","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58905","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-06T03:15:40.567","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58906","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-06T03:15:40.643","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58907","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-06T03:15:40.723","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58908","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-06T03:15:40.800","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58909","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-06T03:15:40.867","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58910","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-06T03:15:40.947","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58911","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-06T03:15:41.023","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58912","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-06T03:15:41.107","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-45325","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-09T14:15:40.963","lastModified":"2026-06-17T07:54:01.933","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDDoS-F","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortiddos-f:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.3.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.3.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.3.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.3.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:6.1.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.2","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.3","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.1","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.2","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.3","versionType":"semver","status":"affected"},{"version":"6.1.0","lessThanOrEqual":"6.1.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-09T14:11:06.295877Z","id":"CVE-2024-45325","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0","versionEndExcluding":"7.0.3","matchCriteriaId":"39C6E1EE-285F-485D-9DAE-A33987B64606"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-344","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53609","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-09T14:15:46.363","lastModified":"2026-06-17T09:38:34.697","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2.11, 7.0.2 through 7.0.11 may allow an authenticated attacker to perform an arbitrary file read on the underlying system via crafted requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.2","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-09T14:07:10.226916Z","id":"CVE-2025-53609","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.2","versionEndExcluding":"7.2.12","matchCriteriaId":"F8D3130A-BFAC-4C36-9F11-C90B919BD744"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"EDB2FF56-D1ED-4EB5-B4D8-8FEDE1A521C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"D358CE92-A30D-4058-8D12-00376E4B9074"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-512","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-59670","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-19T03:15:37.283","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59671","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-19T03:15:37.370","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59672","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-19T03:15:37.440","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59673","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-19T03:15:37.510","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59674","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-19T03:15:37.577","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59675","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-19T03:15:37.643","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59676","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-19T03:15:37.710","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59677","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-19T03:15:37.780","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59678","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-19T03:15:37.847","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59720","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-20T03:15:35.683","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59721","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-20T03:15:36.320","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59722","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-20T03:15:36.423","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59723","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-20T03:15:36.530","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59724","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-20T03:15:36.640","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59725","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-20T03:15:36.733","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59726","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-20T03:15:36.830","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59727","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-20T03:15:36.947","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59811","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:36.313","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59812","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:36.410","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59813","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:36.473","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59876","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:36.543","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59877","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:36.617","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59878","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:36.687","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59879","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:36.750","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59880","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:36.820","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59881","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:36.887","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59882","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:36.963","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59883","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:37.023","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59884","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:37.097","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59885","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-23T03:15:37.160","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2023-47538","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-24T03:15:28.890","lastModified":"2026-10-18T00:10:00.123","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59924","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-24T03:15:29.490","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59925","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-24T03:15:29.570","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59926","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-24T03:15:29.643","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59927","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-24T03:15:29.713","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59928","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-24T03:15:29.780","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59929","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-24T03:15:29.840","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-59930","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-24T03:15:29.907","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-60026","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-26T03:15:44.143","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-60027","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-26T03:15:44.233","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-60028","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-26T03:15:44.320","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-60029","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-26T03:15:44.380","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-60030","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-26T03:15:44.450","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-60031","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-26T03:15:44.520","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-60032","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-26T03:15:44.590","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-60033","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-26T03:15:44.663","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61626","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-30T11:37:42.080","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61627","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-30T11:37:42.173","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61628","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-30T11:37:42.243","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61629","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-30T11:37:42.317","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61630","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-30T11:37:42.383","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61631","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-30T11:37:42.457","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61632","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-30T11:37:42.523","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61633","sourceIdentifier":"psirt@fortinet.com","published":"2025-09-30T11:37:42.597","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61714","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-01T03:15:36.940","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61715","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-01T03:15:37.037","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61716","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-01T03:15:37.113","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61717","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-01T03:15:37.180","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61718","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-01T03:15:37.250","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61719","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-01T03:15:37.323","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61720","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-01T03:15:37.393","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61721","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-01T03:15:37.467","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61722","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-01T03:15:37.543","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61849","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-02T03:15:28.740","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61850","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-02T03:15:29.297","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61851","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-02T03:15:29.360","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61852","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-02T03:15:29.423","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61853","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-02T03:15:29.483","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61854","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-02T03:15:29.550","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61855","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-02T03:15:29.613","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-22862","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-02T13:15:31.520","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0.5 and above may allow an authenticated attacker to elevate their privileges via triggering a malicious Webhook action in the Automation Stitch component."},{"lang":"es","value":"Una vulnerabilidad de omisión de autenticación usando una ruta o canal alternativo [CWE-288] en FortiOS 7.4.0 hasta 7.4.7, 7.2.0 hasta 7.2.11, 7.0.6 y versiones posteriores; y FortiProxy 7.6.0 hasta 7.6.2, 7.4.0 hasta 7.4.8, 7.2 todas las versiones, 7.0.5 y versiones posteriores puede permitir a un atacante autenticado elevar sus privilegios mediante la activación de una acción de Webhook maliciosa en el componente Automation Stitch."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.15","versionType":"semver","status":"affected"},{"version":"7.0.5","lessThanOrEqual":"7.0.22","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.6","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-03T03:55:34.469834Z","id":"CVE-2025-22862","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.6","versionEndExcluding":"7.2.12","matchCriteriaId":"77CA12AA-BA0A-4D41-AAF3-6A848D2F58FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"26515743-5A9A-4885-A08E-535E4ABE0153"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.5","versionEndExcluding":"7.4.9","matchCriteriaId":"1EBFEA4A-6EE3-415A-A645-215978CC27B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"50E93879-C162-4280-9687-89A4ADBB7287"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-385","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-61847","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-03T03:15:36.030","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61887","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-04T03:15:37.220","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61888","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-04T03:15:37.310","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61889","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-04T03:15:37.380","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61890","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-04T03:15:37.457","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61891","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-04T03:15:37.527","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61892","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-04T03:15:37.597","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61893","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-04T03:15:37.670","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61894","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-04T03:15:37.740","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-61895","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-04T03:15:37.800","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-47856","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T14:15:49.927","lastModified":"2026-10-08T12:10:00.217","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiVoice version 7.2.0, 7.0.0 through 7.0.6 and before 6.4.10 allows a privileged attacker to execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests."},{"lang":"es","value":"Dos vulnerabilidades de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('Inyección de comandos del sistema operativo') [CWE-78] en Fortinet FortiVoice versión 7.2.0, 7.0.0 hasta 7.0.6 y anteriores a 6.4.10 permiten a un atacante privilegiado ejecutar código o comandos arbitrarios a través de solicitudes HTTP/HTTPS o CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-14T13:57:13.891238Z","id":"CVE-2025-47856","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.11","matchCriteriaId":"408D5EE5-B951-4022-A4DF-0295A04899E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"58472BB4-2426-44B5-8D17-9C984EA567EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"76B48D4B-338A-4CEB-8712-6D880FF0F034"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-250","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-46718","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:33.653","lastModified":"2026-10-28T19:10:00.193","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted CLI commands."},{"lang":"es","value":"Un desbordamiento de búfer basado en pila en Fortinet FortiOS versiones 7.4.0 a 7.4.1 y 7.2.0 a 7.2.7 y 7.0.0 a 7.0.12 y 6.4.6 a 6.4.15 y 6.2.9 a 6.2.16 y 6.0.13 a 6.0.18 permite al atacante ejecutar código o comandos no autorizados mediante comandos CLI especialmente diseñados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"},{"version":"6.4.6","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.9","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.13","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.15","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.22","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T03:56:21.775254Z","id":"CVE-2023-46718","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.13","versionEndIncluding":"6.0.18","matchCriteriaId":"B338ECA4-60FD-499E-B22B-0F6D892C1896"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.9","versionEndIncluding":"6.2.17","matchCriteriaId":"4BE3691A-0ECF-4FBF-A794-CDD14AAAA6B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.6","versionEndIncluding":"6.4.16","matchCriteriaId":"FD140CE0-044F-4A24-91FF-2F9E0D020FA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.12","matchCriteriaId":"2337F791-B482-4C8C-85DF-F58AEC0DE277"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"4316C2EA-3D6E-4A0C-B81D-ADCE040E03E0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"87D8C76E-50E7-4EE4-972C-19C4A0C46FE0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-354","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-26008","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:34.783","lastModified":"2026-11-09T10:10:00.217","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3 fgfm daemon may allow an unauthenticated attacker to repeatedly reset the fgfm connection via crafted SSL encrypted TCP requests."},{"lang":"es","value":"Una vulnerabilidad de comprobación o manejo inadecuado de condiciones excepcionales [CWE-703] en FortiOS versión 7.4.0 a 7.4.3 y anteriores a 7.2.7, FortiProxy versión 7.4.0 a 7.4.3 y anteriores a 7.2.9, FortiPAM anteriores a 1.2.0 y el demonio fgfm de FortiSwitchManager versión 7.2.0 a 7.2.3 y versión 7.0.0 a 7.0.3 puede permitir a un atacante no autenticado restablecer repetidamente la conexión fgfm a través de solicitudes TCP cifradas con SSL manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.22","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T17:21:53.267379Z","id":"CVE-2024-26008","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-754"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"849D41D5-DBB6-4E77-B1F0-C71016531127"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.3.0","matchCriteriaId":"18427F16-7339-4A9E-9FA4-EC7A2D3EE218"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"85405C4E-811B-4773-BD2A-45F709B60A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3F2C29AD-A11F-4A5F-8BB0-8600D5F77E72"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.4","matchCriteriaId":"7A020C2E-1DDB-4737-92D9-B125FFBE007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"EB0D2553-E4E6-454A-80F6-9D014A4710D3"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-041","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-33507","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:34.980","lastModified":"2026-06-17T07:31:53.247","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logged in admins via crafted cookie and remote authenticated read-only attacker to gain write privilege via crafted cookie."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiIsolator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiisolator:2.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiisolator:2.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"2.4.0","lessThanOrEqual":"2.4.4","versionType":"semver","status":"affected"},{"version":"2.3.0","lessThanOrEqual":"2.3.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-14T17:35:50.623114Z","id":"CVE-2024-33507","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndExcluding":"2.4.5","matchCriteriaId":"8D702E5B-2D94-48AF-94E4-E20A42BA7A06"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-062","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-47569","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:35.327","lastModified":"2026-10-27T23:10:00.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets."},{"lang":"es","value":"Una vulnerabilidad de inserción de información sensible en datos enviados en Fortinet FortiMail versiones 7.4.0 hasta la 7.4.2 incluida, FortiMail versiones 7.2.0 hasta la 7.2.6 incluida, FortiMail 7.0 y todas las versiones, FortiManager versiones 7.6.0 hasta la 7.6.1 incluida, FortiManager versiones 7.4.1 hasta la 7.4.3 incluida, FortiManager Cloud versiones 7.4.1 hasta la 7.4.3 incluida, FortiNDR versiones 7.6.0 hasta la 7.6.1 incluida, FortiNDR versiones 7.4.0 hasta la 7.4.8 incluida, FortiNDR 7.2 y todas las versiones, FortiNDR 7.1 y todas las versiones, FortiNDR 7.0 y todas las versiones, FortiNDR 1.5 y todas las versiones, FortiOS 7.6.0, FortiOS versiones 7.4.0 hasta la 7.4.4 incluida, FortiOS versiones 7.2.0 hasta la 7.2.8 incluida, FortiOS versiones 7.0.0 hasta la 7.0.15 incluida, FortiOS versiones 6.4.0 hasta la 6.4.15 incluida, FortiOS 6.2 y todas las versiones, FortiOS 6.0 y todas las versiones, FortiPAM 1.3 y todas las versiones, FortiPAM 1.2 y todas las versiones, FortiPAM 1.1 y todas las versiones, FortiPAM 1.0 y todas las versiones, FortiProxy versiones 7.4.0 hasta la 7.4.4 incluida, FortiProxy versiones 7.2.0 hasta la 7.2.10 incluida, FortiProxy 7.0 y todas las versiones, FortiProxy 2.0 y todas las versiones, FortiProxy 01.02 y todas las versiones, FortiProxy 1.2 y todas las versiones, FortiProxy 01.01 y todas las versiones, FortiProxy 1.1 y todas las versiones, FortiProxy 01.00 y todas las versiones, FortiRecorder versiones 7.2.0 hasta la 7.2.1 incluida, FortiRecorder versiones 7.0.0 hasta la 7.0.4 incluida, FortiTester versiones 7.4.0 hasta la 7.4.2 incluida, FortiTester 7.3 y todas las versiones, FortiTester 7.2 y todas las versiones, FortiTester 7.1 y todas las versiones, FortiTester 7.0 y todas las versiones, FortiTester 4.2 y todas las versiones, FortiVoice versiones 7.0.0 hasta la 7.0.4 incluida, FortiVoice versiones 6.4.0 hasta la 6.4.9 incluida, FortiVoice versiones 6.0.7 hasta la 6.0.12 incluida, FortiWeb 7.6.0, FortiWeb versiones 7.4.0 hasta la 7.4.4 incluida, FortiWeb 7.2 y todas las versiones, FortiWeb 7.0 y todas las versiones, FortiWeb 6.4 y todas las versiones permite al atacante divulgar información sensible a través de paquetes especialmente diseñados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:6.0.7:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"},{"version":"6.0.7","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiTester","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortitester:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitester:4.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"4.2.0","lessThanOrEqual":"4.2.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortindr:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:1.5.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.1","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T15:31:45.922521Z","id":"CVE-2024-47569","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-201"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.7","matchCriteriaId":"108EB9C0-52F7-4A9C-962F-E01B5E2EB4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"CF986D84-87F9-4314-8F9F-F6E962D1796D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"7269FDB6-A1D4-4912-8751-87BA52614FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"241A8930-4ADA-4380-AA42-F10B28487595"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.4","matchCriteriaId":"164DEDC3-B1C0-42AC-9ADB-CE03CF6A71CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.0","versionEndExcluding":"7.4.9","matchCriteriaId":"8C26FBFC-8FE1-45CE-944C-D979DCC55D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.2","matchCriteriaId":"B121F0FB-8A14-4B65-9A84-85A79DD96C92"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.4.16","matchCriteriaId":"B81974E2-B389-4A35-99F2-240FC140B08B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.16","matchCriteriaId":"3EAE013D-7AE4-4C7A-81A0-296FE00F12CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"678EB0FA-2B29-4108-8378-C4803A543193"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"A71AD879-997D-4787-A1E9-E4132AC521E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.3.1","matchCriteriaId":"A6AC9224-3994-4D38-B823-404AA8A2A854"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"7.2.11","matchCriteriaId":"F07A5FC8-3765-4431-B615-6F348443F7BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"6794E3E0-7FC3-40D8-9568-20E6878E3EDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"CD60BA50-3F98-46BF-97E8-28AB207DE12A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.2","matchCriteriaId":"C0B0D078-2F52-46B4-B9C0-162447828E1B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:24.3.20:*:*:*:-:*:*:*","matchCriteriaId":"B3FEE425-63E9-40B3-AABE-7A98F3C3C5C9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"7.4.3","matchCriteriaId":"F7AC42A3-FF44-4B65-8118-66A23399EFFB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.7","versionEndExcluding":"6.4.10","matchCriteriaId":"92FA7ED9-CCE5-468D-85F1-DC011E20837B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.5","matchCriteriaId":"C22B8401-8893-474D-AB9E-42C3F2EF79CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"CDB9CE13-AAF4-418C-BA26-1A0D53C5C1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"28B43375-DA74-4C5F-BAEE-39F312EEF51F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-228","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-48891","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:35.503","lastModified":"2026-06-17T07:58:58.847","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR 7.6.0 through 7.6.1, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an attacker who has already obtained a non-login low privileged shell access (via another hypothetical vulnerability) to perform a local privilege escalation via crafted commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoaron-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-21T03:55:27.506513Z","id":"CVE-2024-48891","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.5.2","matchCriteriaId":"AB556BB9-A061-45DD-AB46-C583B7CB5108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"199DD7C5-D5B3-4B53-9BF0-DE974A092508"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-412","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-50571","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:35.673","lastModified":"2026-10-27T23:10:00.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyzer 6.2 all versions, FortiAnalyzer 6.0 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.5, FortiAnalyzer Cloud 7.2.1 through 7.2.9, FortiAnalyzer Cloud 7.0.1 through 7.0.13, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.9, FortiManager 7.0.0 through 7.0.13, FortiManager 6.4 all versions, FortiManager 6.2 all versions, FortiManager 6.0 all versions, FortiManager Cloud 7.6.2, FortiManager Cloud 7.4.1 through 7.4.5, FortiManager Cloud 7.2.1 through 7.2.9, FortiManager Cloud 7.0.1 through 7.0.13, FortiManager Cloud 6.4 all versions, FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiProxy 7.6.0 through 7.6.1, FortiProxy 7.4.0 through 7.4.7, FortiProxy 7.2.0 through 7.2.12, FortiProxy 7.0.0 through 7.0.19, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests."},{"lang":"es","value":"Un desbordamiento de búfer basado en montículo en Fortinet FortiAnalyzer desde la versión 7.6.0 hasta la versión 7.6.2 incluida, FortiAnalyzer desde la versión 7.4.0 hasta la versión 7.4.5 incluida, FortiAnalyzer desde la versión 7.2.0 hasta la versión 7.2.9 incluida, FortiAnalyzer desde la versión 7.0.0 hasta la versión 7.0.13 incluida, FortiAnalyzer 6.4 todas las versiones, FortiAnalyzer 6.2 todas las versiones, FortiAnalyzer 6.0 todas las versiones, FortiAnalyzer Cloud desde la versión 7.4.1 hasta la versión 7.4.5 incluida, FortiAnalyzer Cloud desde la versión 7.2.1 hasta la versión 7.2.9 incluida, FortiAnalyzer Cloud desde la versión 7.0.1 hasta la versión 7.0.13 incluida, FortiAnalyzer Cloud 6.4 todas las versiones, FortiManager desde la versión 7.6.0 hasta la versión 7.6.1 incluida, FortiManager desde la versión 7.4.0 hasta la versión 7.4.5 incluida, FortiManager desde la versión 7.2.0 hasta la versión 7.2.9 incluida, FortiManager desde la versión 7.0.0 hasta la versión 7.0.13 incluida, FortiManager 6.4 todas las versiones, FortiManager 6.2 todas las versiones, FortiManager 6.0 todas las versiones, FortiManager Cloud 7.6.2, FortiManager Cloud desde la versión 7.4.1 hasta la versión 7.4.5 incluida, FortiManager Cloud desde la versión 7.2.1 hasta la versión 7.2.9 incluida, FortiManager Cloud desde la versión 7.0.1 hasta la versión 7.0.13 incluida, FortiManager Cloud 6.4 todas las versiones, FortiOS desde la versión 7.6.0 hasta la versión 7.6.2 incluida, FortiOS desde la versión 7.4.0 hasta la versión 7.4.6 incluida, FortiOS desde la versión 7.2.0 hasta la versión 7.2.10 incluida, FortiOS desde la versión 7.0.0 hasta la versión 7.0.16 incluida, FortiOS desde la versión 6.4.0 hasta la versión 6.4.15 incluida, FortiOS 6.2 todas las versiones, FortiProxy desde la versión 7.6.0 hasta la versión 7.6.1 incluida, FortiProxy desde la versión 7.4.0 hasta la versión 7.4.7 incluida, FortiProxy desde la versión 7.2.0 hasta la versión 7.2.12 incluida, FortiProxy desde la versión 7.0.0 hasta la versión 7.0.19 incluida, FortiProxy 2.0 todas las versiones, FortiProxy 01.02 todas las versiones, FortiProxy 1.2 todas las versiones, FortiProxy 01.01 todas las versiones, FortiProxy 1.1 todas las versiones, FortiProxy 01.00 todas las versiones permite al atacante ejecutar código o comandos no autorizados mediante solicitudes especialmente manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.02.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.01.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.07:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.06:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.05:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.04:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.03:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.02:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.01:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:01.00.00:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"},{"version":"1.2.1","lessThanOrEqual":"1.2.13","versionType":"semver","status":"affected"},{"version":"01.02.00","status":"affected"},{"version":"1.1.4","lessThanOrEqual":"1.1.6","versionType":"semver","status":"affected"},{"version":"01.01.00","lessThanOrEqual":"01.01.03","versionType":"semver","status":"affected"},{"version":"01.00.00","lessThanOrEqual":"01.00.07","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.13","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.1","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-17T03:55:18.417406Z","id":"CVE-2024-50571","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"7326FF2C-9D53-4B37-A0F2-E8481791A74B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"FA6919F1-34FA-40E4-9B09-D4DEE1936EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"A3705002-6335-464A-9E40-30E7C82081C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"0518183A-9EE6-4C66-9ADB-CBA9B206D818"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.0.14","matchCriteriaId":"BA273D74-5412-413B-BA36-CC20399D2C5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.10","matchCriteriaId":"BF546373-6C4B-4356-B21F-FF78DE87EC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.6","matchCriteriaId":"2532420B-97C8-497E-BA1F-7A0254FE4566"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.0.14","matchCriteriaId":"D3AE191C-9710-4484-A3D9-4807E4154818"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"E1A7E1FC-4049-47E8-9ACF-32B6C037B458"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"24796E3A-DDCB-4949-9080-5DCEEECF0B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"241A8930-4ADA-4380-AA42-F10B28487595"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.0.14","matchCriteriaId":"7D0CEFC0-D1CD-4901-94E1-AA0420C39089"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.10","matchCriteriaId":"1F83EAFC-BEF9-4358-BFF1-523023095643"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.6","matchCriteriaId":"6F663525-A2D6-40AB-905F-367B7E83054D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:7.6.2:*:*:*:*:*:*:*","matchCriteriaId":"CC0B37EE-BCEE-45A5-B3E6-8DF64C187AC5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"6.4.16","matchCriteriaId":"A27C234F-C3D2-465E-832A-3C5418E22D56"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.17","matchCriteriaId":"BD357034-B2FD-4C2E-97FE-2C54D686D885"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"4386465B-EFF9-41BA-B393-82135A2591DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"DE7A88C9-8466-4414-AECB-0689F23108CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"D6B883B9-9ECD-4BC5-B497-770F34F92473"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"7.0.20","matchCriteriaId":"CCA442DE-0707-4F4D-8893-F41FF25FF7C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.13","matchCriteriaId":"EDC18768-0891-465E-9900-3DF5D22A5CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"AE578F21-0BE9-45BB-AE21-494308FF96B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C1A9E35E-AA55-44C4-BAAC-2E44E6DCE2EF"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-442","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-22258","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:36.523","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests."},{"lang":"es","value":"Un desbordamiento de búfer basado en montículo en Fortinet FortiSRA 1.5.0, 1.4.0 hasta 1.4.2, FortiPAM 1.5.0, 1.4.0 hasta 1.4.2, 1.3.0 hasta 1.3.1, 1.2.0, 1.1.0 hasta 1.1.2, 1.0.0 hasta 1.0.3, FortiProxy 7.6.0 hasta 7.6.1, 7.4.0 hasta 7.4.7, FortiOS 7.6.0 hasta 7.6.2, 7.4.0 hasta 7.4.6, 7.2.0 hasta 7.2.10, 7.0.2 hasta 7.0.16, FortiSwitchManager 7.2.1 hasta 7.2.5 permite a los atacantes escalar sus privilegios mediante solicitudes HTTP especialmente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.5.0","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.2","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.2","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSRA","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisra:1.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisra:1.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisra:1.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisra:1.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.5.0","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.1","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-17T03:55:17.613485Z","id":"CVE-2025-22258","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.2","versionEndExcluding":"7.0.17","matchCriteriaId":"7F5DB611-137B-4FE8-BADF-CE8B35CBAA89"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"4386465B-EFF9-41BA-B393-82135A2591DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"DE7A88C9-8466-4414-AECB-0689F23108CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"D6B883B9-9ECD-4BC5-B497-770F34F92473"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.4.3","matchCriteriaId":"6C39FBB2-E81C-4207-AFDD-080EC80F00A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0401C6C0-DC87-4728-873E-6DA489C859A8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"AE578F21-0BE9-45BB-AE21-494308FF96B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"C6E32BEB-8804-452C-A054-DD9FFCC8B796"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisra:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"1.4.3","matchCriteriaId":"4E56CAA8-088C-4116-9C3B-A2E53A2BB82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisra:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"4EF5FD80-43CE-40AF-9419-2639BD772409"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.6","matchCriteriaId":"49324722-E453-42FC-8D2A-C94EF60FF710"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-546","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-25252","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:36.683","lastModified":"2026-10-08T12:10:00.217","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker (e.g. a former admin whose account was removed and whose session was terminated) in possession of the SAML record of a user session to access or re-open that session via re-use of SAML record."},{"lang":"es","value":"Una vulnerabilidad de expiración de sesión insuficiente [CWE-613] en FortiOS SSL VPN 7.6.0 a 7.6.2, 7.4.0 a 7.4.6, 7.2.0 a 7.2.10, 7.0.0 a 7.0.16, 6.4 todas las versiones puede permitir a un atacante remoto (p. ej., un exadministrador cuya cuenta fue eliminada y cuya sesión fue terminada) en posesión del registro SAML de una sesión de usuario acceder o reabrir esa sesión mediante la reutilización del registro SAML."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-12T00:00:00+00:00","id":"CVE-2025-25252","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.17","matchCriteriaId":"71B60D86-1681-44AC-A5C5-3776BD07040B"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"4386465B-EFF9-41BA-B393-82135A2591DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"DE7A88C9-8466-4414-AECB-0689F23108CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"D6B883B9-9ECD-4BC5-B497-770F34F92473"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-487","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-25253","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:36.850","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions ZTNA proxy may allow an unauthenticated attacker in a man-in-the middle position to intercept and tamper with connections to the ZTNA proxy"},{"lang":"es","value":"Una vulnerabilidad de validación incorrecta de certificado con falta de coincidencia de host [CWE-297] en FortiProxy versión 7.6.1 y anteriores, versión 7.4.8 y anteriores, 7.2 todas las versiones, 7.0 todas las versiones y FortiOS versión 7.6.2 y anteriores, versión 7.4.8 y anteriores, 7.2 todas las versiones, 7.0 todas las versiones proxy ZTNA puede permitir a un atacante no autenticado en una posición de intermediario interceptar y manipular las conexiones al proxy ZTNA."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.15","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.22","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"1.4.1","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T03:57:12.627770Z","id":"CVE-2025-25253","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-297"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"BE879BBE-A7E4-4F8F-9A64-C83A8A28A4D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"C6E32BEB-8804-452C-A054-DD9FFCC8B796"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"E8B043B6-F6EC-4551-9F0F-BC8E7AFB5925"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"D6B883B9-9ECD-4BC5-B497-770F34F92473"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-457","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-25255","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:37.020","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0.1 through 7.0.22 may allow an unauthenticated proxy user to bypass the domain fronting protection feature via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de comprobación de seguridad implementada incorrectamente para la vulnerabilidad estándar [CWE-358] en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiProxy 7.6.0 hasta 7.6.3, FortiProxy 7.4.0 hasta 7.4.11, FortiProxy 7.2 en todas las versiones, FortiProxy 7.0.1 hasta 7.0.22 puede permitir a un usuario de proxy no autenticado eludir la función de protección de 'domain fronting' a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.11","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.15","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.22","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-15T13:14:31.720498Z","id":"CVE-2025-25255","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-358"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.1","versionEndExcluding":"7.6.4","matchCriteriaId":"3973E980-FB6B-440D-AB85-14B7147EF77D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-372","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-31365","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:37.263","lastModified":"2026-10-08T12:10:00.217","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2.8 may allow an unauthenticated attacker to execute arbitrary code on the victim's host via tricking the user into visiting a malicious website."},{"lang":"es","value":"Una vulnerabilidad de control inadecuado de la generación de código ('Inyección de código') [CWE-94] en FortiClientMac 7.4.0 hasta 7.4.3, 7.2.1 hasta 7.2.8 podría permitir a un atacante no autenticado ejecutar código arbitrario en el host de la víctima mediante el engaño al usuario para que visite un sitio web malicioso."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientmac:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":3.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T03:56:21.013019Z","id":"CVE-2025-31365","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.9","matchCriteriaId":"07676557-6E50-4914-8C38-29B7D38F8BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"35B10AC0-1B23-47AF-B176-1FAB17A32C3C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-037","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-31366","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:37.423","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSASE 25.2.a may allow an unauthenticated attacker to perform a reflected cross site scripting (XSS) via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web [CWE-79] vulnerabilidad en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4.0 hasta 7.4.8, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones, FortiProxy 7.6.0 hasta 7.6.3, FortiProxy 7.4 todas las versiones, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones, FortiSASE 25.2.a puede permitir a un atacante no autenticado realizar un cross-site scripting (XSS) reflejado a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSASE","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisase:25.2.a:*:*:*:*:*:*:*"],"versions":[{"version":"25.2.a","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-14T16:45:04.804545Z","id":"CVE-2025-31366","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"1B6548FD-E370-45D7-81D5-6EF892810052"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.6.4","matchCriteriaId":"4DA70753-E996-4081-9C13-7F60AC993B09"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:25.3.40:*:*:*:feature:*:*:*","matchCriteriaId":"53197A72-5D08-4938-A415-72C573024BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:25.3.40:*:*:*:mature:*:*:*","matchCriteriaId":"2603C391-AEC6-450A-A30A-4F8682F9565D"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-542","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-31514","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:37.587","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de inserción de información sensible en archivo de registro [CWE-532] en FortiOS 7.6.0 hasta 7.6.3, 7.4 todas las versiones, 7.2 todas las versiones, 7.0 todas las versiones, 6.4 todas las versiones puede permitir a un atacante con al menos privilegios de solo lectura recuperar información sensible relacionada con 2FA mediante la observación de registros o mediante el comando diagnose."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.11","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-14T16:33:10.794782Z","id":"CVE-2025-31514","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.6.4","matchCriteriaId":"A70BE83D-8851-47DB-9360-B5B2E7CAE1ED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.6.4","matchCriteriaId":"4DA70753-E996-4081-9C13-7F60AC993B09"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-452","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-46774","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:38.500","lastModified":"2026-10-08T12:10:00.217","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.2 and below, version 7.2.9 and below, 7.0 all versions may allow a local user to escalate their privileges via FortiClient related executables."},{"lang":"es","value":"Una vulnerabilidad de verificación incorrecta de firma criptográfica [CWE-347] en el instalador de FortiClient para macOS versión 7.4.2 y anteriores, versión 7.2.9 y anteriores, 7.0 todas las versiones podría permitir a un usuario local escalar sus privilegios a través de ejecutables relacionados con FortiClient."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientmac:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T03:56:20.193267Z","id":"CVE-2025-46774","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.10","matchCriteriaId":"1557746B-A90F-4626-A5DA-9B68D6A3CA3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"35B10AC0-1B23-47AF-B176-1FAB17A32C3C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-126","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-47890","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:38.667","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSASE 25.2.a may allow an unauthenticated attacker to perform an open redirect attack via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad 'Redirección de URL a sitios no confiables' [CWE-601] en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4.0 hasta 7.4.8, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones, FortiProxy 7.6.0 hasta 7.6.3, FortiProxy 7.4 todas las versiones, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones, FortiSASE 25.2.a puede permitir a un atacante no autenticado realizar un ataque de redirección abierta mediante solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.14","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSASE","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisase:25.2.a:*:*:*:*:*:*:*"],"versions":[{"version":"25.2.a","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":2.6,"baseSeverity":"LOW","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T17:27:26.292358Z","id":"CVE-2025-47890","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"1B6548FD-E370-45D7-81D5-6EF892810052"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.6.4","matchCriteriaId":"4DA70753-E996-4081-9C13-7F60AC993B09"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:25.3.40:*:*:*:feature:*:*:*","matchCriteriaId":"53197A72-5D08-4938-A415-72C573024BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:25.3.40:*:*:*:mature:*:*:*","matchCriteriaId":"2603C391-AEC6-450A-A30A-4F8682F9565D"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-542","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-49201","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:38.840","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiSwitchManager 7.2.0 through 7.2.4 allows attacker to execute unauthorized code or commands via specially crafted http requests"},{"lang":"es","value":"Una vulnerabilidad de autenticación débil en Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 hasta 1.4.2, FortiPAM 1.3 todas las versiones, FortiPAM 1.2 todas las versiones, FortiPAM 1.1 todas las versiones, FortiPAM 1.0 todas las versiones, FortiSwitchManager 7.2.0 hasta 7.2.4 permite al atacante ejecutar código o comandos no autorizados mediante solicitudes HTTP especialmente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.5.0","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.2","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-15T20:49:41.369004Z","id":"CVE-2025-49201","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1390"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.4.3","matchCriteriaId":"6C39FBB2-E81C-4207-AFDD-080EC80F00A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0401C6C0-DC87-4728-873E-6DA489C859A8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.5","matchCriteriaId":"EA41837A-E903-4B24-98C1-79B7142DCF37"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-010","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53845","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:39.010","lastModified":"2026-10-08T11:10:00.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests."},{"lang":"es","value":"Una vulnerabilidad de autenticación impropia [CWE-287] en Fortinet FortiAnalyzer versión 7.6.0 hasta 7.6.3 y anteriores a 7.4.6 permite a un atacante no autenticado obtener información relativa a la salud y el estado del dispositivo, o causar una denegación de servicio mediante solicitudes OFTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-14T17:34:47.938251Z","id":"CVE-2025-53845","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"5CD897DB-50DB-420A-8DEB-E3D7FE52DBE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"7E7EC074-7835-438D-8501-D7FA6A84F280"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-378","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-54822","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:39.180","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions allows an authenticated attacker to access static files of others VDOMs via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad de autorización impropia [CWE-285] vulnerabilidad en Fortinet FortiOS 7.4.0 a 7.4.1, FortiOS 7.2.0 a 7.2.8, FortiOS 7.0.0 a 7.0.11, FortiProxy 7.4.0 a 7.4.8, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones, FortiProxy 2.0 todas las versiones permite a un atacante autenticado acceder a archivos estáticos de otros VDOMs a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.15","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.22","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThanOrEqual":"2.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-14T16:37:27.718798Z","id":"CVE-2025-54822","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-285"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.9","matchCriteriaId":"AC7395B0-2864-49E3-8B70-935A17EF3162"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"4316C2EA-3D6E-4A0C-B81D-ADCE040E03E0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"BB3C0418-E314-45E0-A706-A9B45231ED1E"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-684","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-54973","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:39.703","lastModified":"2026-10-08T11:10:00.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10 and before 7.0.13 allows an attacker to attempt to win a race condition to bypass the FortiCloud SSO authorization via crafted FortiCloud SSO requests."},{"lang":"es","value":"Una vulnerabilidad de ejecución concurrente utilizando un recurso compartido con sincronización inadecuada ('condición de carrera') [CWE-362] en Fortinet FortiAnalyzer versiones 7.6.0 a 7.6.2, 7.4.0 a 7.4.6, 7.2.0 a 7.2.10 y anteriores a 7.0.13 permite a un atacante intentar ganar una condición de carrera para eludir la autorización de FortiCloud SSO mediante solicitudes FortiCloud SSO manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.9","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T15:34:21.106358Z","id":"CVE-2025-54973","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.9","versionEndExcluding":"7.0.14","matchCriteriaId":"49E1EECF-D4CD-42AE-9BC0-600643D851DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"F66A175C-52AB-4949-9082-F880BAB1693D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"307F24A7-D7DE-4DB6-97CE-65647BF05C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"0518183A-9EE6-4C66-9ADB-CBA9B206D818"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-198","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-57716","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:40.113","lastModified":"2026-10-08T11:10:00.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder."},{"lang":"es","value":"Una vulnerabilidad de elemento de ruta de búsqueda no controlada [CWE-427] en FortiClient Windows 7.4.0 a 7.4.3, 7.2.0 a 7.2.11, 7.0 todas las versiones puede permitir a un usuario local con pocos privilegios realizar un ataque de secuestro de DLL mediante la colocación de una DLL maliciosa en la carpeta de instalación del Instalador en Línea de FortiClient."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-17T03:55:19.193043Z","id":"CVE-2025-57716","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.12","matchCriteriaId":"93305AAD-0315-4D4E-92FB-03665C2CB01B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"51121FCA-2CA9-4B4B-A27C-C4729AB797BB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-685","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-57740","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:40.293","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en montículo [CWE-122] en la conexión de marcador RDP de FortiOS versión 7.6.2 y anteriores, versión 7.4.7 y anteriores, versión 7.2.10 y anteriores, 7.0 todas las versiones, 6.4 todas las versiones; FortiPAM versión 1.5.0, versión 1.4.2 y anteriores, 1.3 todas las versiones, 1.2 todas las versiones, 1.1 todas las versiones, 1.0 todas las versiones y FortiProxy versión 7.6.2 y anteriores, versión 7.4.3 y anteriores, 7.2 todas las versiones, 7.0 todas las versiones puede permitir a un usuario autenticado ejecutar código no autorizado a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.5.0","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.2","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.15","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.22","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T03:57:11.609008Z","id":"CVE-2025-57740","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.4","matchCriteriaId":"B9E9E89B-BFFD-41F2-AEBB-06D55FE10038"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"50E93879-C162-4280-9687-89A4ADBB7287"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.4.3","matchCriteriaId":"6C39FBB2-E81C-4207-AFDD-080EC80F00A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0401C6C0-DC87-4728-873E-6DA489C859A8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.11","matchCriteriaId":"753664B2-3AE8-499A-9C8A-B7D928439697"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"26515743-5A9A-4885-A08E-535E4ABE0153"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"D6B883B9-9ECD-4BC5-B497-770F34F92473"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-756","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-57741","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:40.457","lastModified":"2026-10-08T11:10:00.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local attacker to run arbitrary code or commands via LaunchDaemon hijacking."},{"lang":"es","value":"Una vulnerabilidad de asignación de permisos incorrecta para un recurso crítico [CWE-732] en FortiClientMac 7.4.0 hasta 7.4.3, 7.2.0 hasta 7.2.11, 7.0 todas las versiones puede permitir a un atacante local ejecutar código o comandos arbitrarios mediante el secuestro de LaunchDaemon."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientmac:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T03:57:10.519942Z","id":"CVE-2025-57741","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.12","matchCriteriaId":"5EEC00BE-1931-499F-A348-EDC76132E1DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"35B10AC0-1B23-47AF-B176-1FAB17A32C3C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-664","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-58324","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:40.607","lastModified":"2026-10-08T11:10:00.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web [CWE-79] en FortiSIEM 7.2.0 hasta 7.2.2, 7.1 todas las versiones, 7.0 todas las versiones, 6.7 todas las versiones, 6.6 todas las versiones, 6.5 todas las versiones, 6.4 todas las versiones, 6.3 todas las versiones, 6.2 todas las versiones puede permitir a un atacante autenticado realizar un ataque de cross-site scripting (XSS) almacenado a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.10","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.5","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T03:57:08.435168Z","id":"CVE-2025-58324","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"5619BB86-43BB-45D5-B197-ABA3C1E2EAEB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-280","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-58325","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:40.767","lastModified":"2026-10-08T11:10:00.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through 7.0.15, 6.4 all versions may allow a local authenticated attacker to execute system commands via crafted CLI commands."},{"lang":"es","value":"Una vulnerabilidad de Provisión Incorrecta de Funcionalidad Especificada [CWE-684] en FortiOS 7.6.0, 7.4.0 hasta 7.4.5, 7.2.5 hasta 7.2.10, 7.0.0 hasta 7.0.15, 6.4 todas las versiones puede permitir a un atacante local autenticado ejecutar comandos del sistema a través de comandos CLI manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.5","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T03:57:09.507952Z","id":"CVE-2025-58325","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-684"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.16","matchCriteriaId":"FA0532A5-31F2-4A92-BF31-6003E28AC948"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"4386465B-EFF9-41BA-B393-82135A2591DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"199954FD-1280-46F8-8515-7591CE75A1E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-361","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-58903","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:40.930","lastModified":"2026-10-08T11:10:00.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a  Null Pointer Dereference, crashing the http daemon via a specialy crafted request."},{"lang":"es","value":"Una vulnerabilidad de valor de retorno no verificado [CWE-252] en Fortinet FortiOS versiones 7.6.0 a 7.6.3 y anteriores a 7.4.8 API permite a un usuario autenticado causar una desreferencia de puntero nulo, bloqueando el demonio HTTP a través de una solicitud especialmente diseñada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T17:37:14.667302Z","id":"CVE-2025-58903","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-252"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"1B6548FD-E370-45D7-81D5-6EF892810052"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-653","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-59921","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-14T16:15:41.200","lastModified":"2026-10-08T11:10:00.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version 7.1.4 and below, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una vulnerabilidad [CWE-200] de exposición de información sensible a un actor no autorizado en Fortinet FortiADC versión 7.4.0, versión 7.2.3 y anteriores, versión 7.1.4 y anteriores, 7.0 todas las versiones, 6.2 todas las versiones puede permitir a un atacante autenticado obtener datos sensibles a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.4","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-14T17:35:23.426428Z","id":"CVE-2025-59921","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.1.5","matchCriteriaId":"5D24E0A5-DCC9-406E-B9C9-DBA37E728A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.4","matchCriteriaId":"EEF4EE14-8BCF-425A-9A49-1CF82BD47573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C624CB5-F745-4781-839A-B397EC97590B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-23-434","source":"psirt@fortinet.com","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2025-62440","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-15T03:15:33.580","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62441","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-15T03:15:33.667","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62442","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-15T03:15:33.737","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62443","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-15T03:15:33.797","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62444","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-15T03:15:33.867","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62445","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-15T03:15:33.930","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62446","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-15T03:15:33.997","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62447","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-15T03:15:34.063","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62448","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-15T03:15:34.127","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46752","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-16T14:15:35.673","lastModified":"2026-10-09T10:10:00.193","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code."},{"lang":"es","value":"Una inserción de información sensible en un archivo de registro en Fortinet FortiDLP 12.0.0 hasta 12.0.5, 11.5.1, 11.4.6, 11.4.5 permite al atacante la revelación de información mediante la reutilización del código de inscripción."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDLP","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortidlp:12.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:12.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:12.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.5:*:*:*:*:*:*:*"],"versions":[{"version":"12.0.4","lessThanOrEqual":"12.0.5","versionType":"semver","status":"affected"},{"version":"12.0.2","status":"affected"},{"version":"12.0.0","status":"affected"},{"version":"11.5.1","status":"affected"},{"version":"11.4.5","lessThanOrEqual":"11.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T14:20:20.963552Z","id":"CVE-2025-46752","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortidlp_agent:*:*:*:*:*:*:*:*","versionStartIncluding":"11.4.5","versionEndIncluding":"12.0.5","matchCriteriaId":"69C715E7-58C6-407E-99E3-DE7A4B554A3F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-160","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53950","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-16T14:15:35.897","lastModified":"2026-10-09T10:10:00.193","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS and Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1. through 11.1.2 and 11.0.1 and 10.5.1 and 10.4.0, and 10.3.1 may allow an authenticated administrator to collect current user's email information."},{"lang":"es","value":"Una vulnerabilidad de Exposición de Información Personal Privada ('Violación de Privacidad') [CWE-359] en el plugin Outlookproxy del Agente FortiDLP de Fortinet para MacOS y Windows 11.5.1 y 11.4.2 a 11.4.6 y 11.3.2 a 11.3.4 y 11.2.0 a 11.2.3 y 11.1.1 a 11.1.2 y 11.0.1 y 10.5.1 y 10.4.0, y 10.3.1 puede permitir a un administrador autenticado recopilar información de correo electrónico del usuario actual."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDLP","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortidlp:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:10.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:10.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:10.3.1:*:*:*:*:*:*:*"],"versions":[{"version":"11.5.1","status":"affected"},{"version":"11.4.2","lessThanOrEqual":"11.4.6","versionType":"semver","status":"affected"},{"version":"11.3.2","lessThanOrEqual":"11.3.4","versionType":"semver","status":"affected"},{"version":"11.2.3","status":"affected"},{"version":"11.2.0","status":"affected"},{"version":"11.1.1","lessThanOrEqual":"11.1.2","versionType":"semver","status":"affected"},{"version":"11.0.1","status":"affected"},{"version":"10.5.1","status":"affected"},{"version":"10.4.0","status":"affected"},{"version":"10.3.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.1,"impactScore":4.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.5,"impactScore":4.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T14:22:49.612036Z","id":"CVE-2025-53950","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-359"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortidlp_agent:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3.1","versionEndIncluding":"11.5.1","matchCriteriaId":"C1DB36F0-999E-467A-82F9-2A203F69F423"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","matchCriteriaId":"387021A0-AF36-463C-A605-32EA7DAC172E"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-639","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53951","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-16T14:15:36.070","lastModified":"2026-10-09T10:10:00.193","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's Outlookproxy plugin for Windows 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1 through 11.1.2 and  11.0.1 and 10.5.1 and 10.4.0, and 10.3.1 may allow an authenticated attacker to escalate their privilege to LocalService via sending a crafted request to a local listening port."},{"lang":"es","value":"Una vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido ('Salto de ruta') [CWE-22] en el plugin Outlookproxy del Agente FortiDLP de Fortinet para Windows 11.5.1 y 11.4.2 hasta 11.4.6 y 11.3.2 hasta 11.3.4 y 11.2.0 hasta 11.2.3 y 11.1.1 hasta 11.1.2 y 11.0.1 y 10.5.1 y 10.4.0, y 10.3.1 puede permitir a un atacante autenticado escalar su privilegio a LocalService mediante el envío de una solicitud manipulada a un puerto de escucha local."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDLP","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortidlp:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:10.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:10.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:10.3.1:*:*:*:*:*:*:*"],"versions":[{"version":"11.5.1","status":"affected"},{"version":"11.4.2","lessThanOrEqual":"11.4.6","versionType":"semver","status":"affected"},{"version":"11.3.2","lessThanOrEqual":"11.3.4","versionType":"semver","status":"affected"},{"version":"11.2.3","status":"affected"},{"version":"11.2.0","status":"affected"},{"version":"11.1.1","lessThanOrEqual":"11.1.2","versionType":"semver","status":"affected"},{"version":"11.0.1","status":"affected"},{"version":"10.5.1","status":"affected"},{"version":"10.4.0","status":"affected"},{"version":"10.3.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T14:36:52.618969Z","id":"CVE-2025-53951","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortidlp_agent:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3.1","versionEndIncluding":"11.5.1","matchCriteriaId":"C1DB36F0-999E-467A-82F9-2A203F69F423"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-628","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-54658","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-16T14:15:36.487","lastModified":"2026-10-09T10:10:00.193","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiDLP Agent's Outlookproxy plugin for MacOS 11.5.1 and 11.4.2 through 11.4.6 and 11.3.2 through 11.3.4 and 11.2.0 through 11.2.3 and 11.1.1 through 11.1.2 and 11.0.1 and 10.5.1 and 10.4.0, and 10.3.1 may allow an authenticated attacker to escalate their privilege to Root via sending a crafted request to a local listening port."},{"lang":"es","value":"Una vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido ('salto de ruta') [CWE-22] en el plugin Outlookproxy del Agente FortiDLP de Fortinet para MacOS 11.5.1 y 11.4.2 hasta 11.4.6 y 11.3.2 hasta 11.3.4 y 11.2.0 hasta 11.2.3 y 11.1.1 hasta 11.1.2 y 11.0.1 y 10.5.1 y 10.4.0, y 10.3.1 puede permitir a un atacante autenticado escalar su privilegio a Root enviando una solicitud manipulada a un puerto de escucha local."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDLP","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortidlp:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:11.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:10.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:10.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortidlp:10.3.1:*:*:*:*:*:*:*"],"versions":[{"version":"11.5.1","status":"affected"},{"version":"11.4.2","lessThanOrEqual":"11.4.6","versionType":"semver","status":"affected"},{"version":"11.3.2","lessThanOrEqual":"11.3.4","versionType":"semver","status":"affected"},{"version":"11.2.3","status":"affected"},{"version":"11.2.0","status":"affected"},{"version":"11.1.1","lessThanOrEqual":"11.1.2","versionType":"semver","status":"affected"},{"version":"11.0.1","status":"affected"},{"version":"10.5.1","status":"affected"},{"version":"10.4.0","status":"affected"},{"version":"10.3.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-16T14:41:21.620546Z","id":"CVE-2025-54658","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortidlp_agent:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3.1","versionEndIncluding":"11.5.1","matchCriteriaId":"C1DB36F0-999E-467A-82F9-2A203F69F423"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","matchCriteriaId":"387021A0-AF36-463C-A605-32EA7DAC172E"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-628","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-62632","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-18T03:15:46.787","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62633","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-18T03:15:47.347","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62634","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-18T03:15:47.410","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62635","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-18T03:15:47.470","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62636","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-18T03:15:47.533","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62637","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-18T03:15:47.597","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62638","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-18T03:15:47.660","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62639","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-18T03:15:47.723","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62640","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-18T03:15:47.790","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62677","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-21T04:16:05.260","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62678","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-21T04:16:05.997","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62679","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-21T04:16:06.760","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62680","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-21T04:16:06.867","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62681","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-21T04:16:06.947","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62682","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-21T04:16:07.020","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62683","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-21T04:16:07.100","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62684","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-21T04:16:07.170","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62804","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-23T03:15:30.657","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62805","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-23T03:15:30.753","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62806","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-23T03:15:30.813","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62807","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-23T03:15:30.880","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62808","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-23T03:15:30.940","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62809","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-23T03:15:31.007","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62810","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-23T03:15:31.063","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62811","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-23T03:15:31.120","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62812","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-23T03:15:31.190","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62827","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-24T03:15:35.767","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62828","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-24T03:15:36.420","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62829","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-24T03:15:36.483","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62830","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-24T03:15:36.543","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62831","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-24T03:15:36.607","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62832","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-24T03:15:36.670","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62833","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-24T03:15:36.723","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62834","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-24T03:15:36.790","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-62835","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-24T03:15:36.853","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64158","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-29T04:16:03.240","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64159","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-29T04:16:04.457","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64160","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-29T04:16:05.510","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64161","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-29T04:16:05.587","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64162","sourceIdentifier":"psirt@fortinet.com","published":"2025-10-29T04:16:05.683","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64448","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-05T04:15:33.227","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64449","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-05T04:15:33.313","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64450","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-05T04:15:33.377","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64451","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-05T04:15:33.440","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64452","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-05T04:15:33.503","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64453","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-05T04:15:33.573","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64454","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-05T04:15:33.637","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64455","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-05T04:15:33.703","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64472","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-06T04:15:32.657","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64473","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-06T04:15:32.740","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64474","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-06T04:15:32.810","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64475","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-06T04:15:32.873","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64476","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-06T04:15:32.940","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64477","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-06T04:15:33.000","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64478","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-06T04:15:33.063","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64479","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-06T04:15:33.123","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64480","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-06T04:15:33.177","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-64446","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-14T16:15:58.567","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta relativo en Fortinet FortiWeb 8.0.0 hasta 8.0.1, FortiWeb 7.6.0 hasta 7.6.4, FortiWeb 7.4.0 hasta 7.4.9, FortiWeb 7.2.0 hasta 7.2.11, FortiWeb 7.0.0 hasta 7.0.11 puede permitir a un atacante ejecutar comandos administrativos en el sistema a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-15T04:56:17.687579Z","id":"CVE-2025-64446","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-11-14","cisaActionDue":"2025-11-21","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiWeb Path Traversal Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"CDE13E2A-CEC3-4FC7-98AD-11CA1EAEC0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"551127B2-DCE9-403D-8073-ACD717CD0B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.10","matchCriteriaId":"83212B0A-5EEF-4FA7-89C5-5E4D687CBB07"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"D358CE92-A30D-4058-8D12-00376E4B9074"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.2","matchCriteriaId":"F1DD8ABA-9BB5-4ED8-9E34-1CB0752651DF"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-910","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-64446","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2025-65064","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-15T04:15:56.893","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65065","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-15T04:15:57.007","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65066","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-15T04:15:57.100","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65067","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-15T04:15:57.193","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65068","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-15T04:15:57.290","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65069","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-15T04:15:57.383","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65070","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-15T04:15:57.483","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65071","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-15T04:15:57.573","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65072","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-15T04:15:57.667","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-46215","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:01.513","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file."},{"lang":"es","value":"Una vulnerabilidad de aislamiento o compartimentación inadecuados [CWE-653] en Fortinet FortiSandbox 5.0.0 hasta 5.0.1, FortiSandbox 4.4.0 hasta 4.4.7, FortiSandbox 4.2 todas las versiones, FortiSandbox 4.0 todas las versiones puede permitir a un atacante no autenticado evadir el escaneo de sandboxing a través de un archivo manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.1","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.7","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-18T20:04:06.752465Z","id":"CVE-2025-46215","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-653"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.4.8","matchCriteriaId":"C0B145A7-83A1-4ED2-A9DC-109CAB0AB217"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.2","matchCriteriaId":"42640C50-5490-4B50-840B-D35031671C42"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-501","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-46373","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:01.753","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.8 may allow an authenticated local IPSec user to execute arbitrary code or commands via \"fortips_74.sys\". The attacker would need to bypass the  Windows heap integrity protections"},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en montículo [CWE-122] en Fortinet FortiClientWindows 7.4.0 a 7.4.3, FortiClientWindows 7.2.0 a 7.2.8 podría permitir a un usuario local IPSec autenticado ejecutar código o comandos arbitrarios a través de “fortips_74.sys”. El atacante necesitaría eludir las protecciones de integridad del montículo de Windows."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.1,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-18T20:58:00.349968Z","id":"CVE-2025-46373","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"5557A33B-0705-4621-B729-BD087AB315AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"51121FCA-2CA9-4B4B-A27C-C4729AB797BB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-125","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-46775","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:01.973","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands."},{"lang":"es","value":"Una vulnerabilidad de mensajes de depuración que revelan información innecesaria en Fortinet FortiExtender 7.6.0 a 7.6.1, FortiExtender 7.4.0 a 7.4.6, FortiExtender 7.2 todas las versiones, FortiExtender 7.0 todas las versiones puede permitir a un usuario autenticado obtener credenciales de administrador mediante comandos de registro de depuración."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiExtender","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiextender:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-18T18:33:30.741688Z","id":"CVE-2025-46775","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1295"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"D99BE066-31DA-417E-9C7F-73453CE4A69D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"3F3DA4B8-95C4-407B-B632-D8F48C89511E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiextender:-:*:*:*:*:*:*:*","matchCriteriaId":"A0617C1D-E321-409D-B54B-775E854A03C1"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-259","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-46776","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:02.180","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or commands via crafted CLI commands."},{"lang":"es","value":"Una copia de búfer sin verificar el tamaño de la entrada ('clásico desbordamiento de búfer') en Fortinet FortiExtender 7.6.0 hasta 7.6.1, FortiExtender 7.4.0 hasta 7.4.6, FortiExtender 7.2 todas las versiones, FortiExtender 7.0 todas las versiones puede permitir a un usuario autenticado ejecutar código o comandos arbitrarios mediante comandos CLI manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiExtender","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiextender:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.5,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-18T18:33:55.201822Z","id":"CVE-2025-46776","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"D99BE066-31DA-417E-9C7F-73453CE4A69D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"3F3DA4B8-95C4-407B-B632-D8F48C89511E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiextender:-:*:*:*:*:*:*:*","matchCriteriaId":"A0617C1D-E321-409D-B54B-775E854A03C1"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-251","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-47761","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:02.413","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver.  Success of the attack would require bypassing the Windows memory protections such as Heap integrity and HSP. In addition, it requires a valid and running VPN IPSec connection."},{"lang":"es","value":"Una vulnerabilidad de IOCTL expuesto con control de acceso insuficiente [CWE-782] en Fortinet FortiClientWindows 7.4.0 a 7.4.3, FortiClientWindows 7.2.0 a 7.2.9 puede permitir a un usuario local autenticado ejecutar código no autorizado a través del controlador fortips. El éxito del ataque requeriría eludir las protecciones de memoria de Windows, como la integridad del Heap y HSP. Además, requiere una conexión VPN IPSec válida y en ejecución."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.1,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-18T21:11:44.141602Z","id":"CVE-2025-47761","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-782"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"F9DAAE56-ACF6-464C-AF20-68D9FE2C31B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"51121FCA-2CA9-4B4B-A27C-C4729AB797BB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-112","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-48839","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:02.610","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to execute arbitrary code via specially crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de escritura fuera de límites [CWE-787] en FortiADC 8.0.0, 7.6.0 hasta 7.6.2, 7.4.0 hasta 7.4.7, 7.2 todas las versiones, 7.1 todas las versiones, 7.0 todas las versiones, 6.2 todas las versiones puede permitir a un atacante autenticado ejecutar código arbitrario mediante solicitudes HTTP especialmente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:8.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.6.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.6.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.6.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.8:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-19T04:55:33.567246Z","id":"CVE-2025-48839","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.4.8","matchCriteriaId":"E77DAF02-DADB-4F22-817B-39059388C7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"B70F7B79-80C8-4DD1-A310-86E4EEC373EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE5091E7-982E-451B-B782-4C9669421558"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-225","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53843","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:03.033","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets"},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en pila en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4.0 hasta 7.4.8, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones permite al atacante ejecutar código o comandos no autorizados mediante paquetes especialmente diseñados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-19T04:55:32.869143Z","id":"CVE-2025-53843","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"1B6548FD-E370-45D7-81D5-6EF892810052"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-358","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-54660","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:03.270","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password"},{"lang":"es","value":"Una vulnerabilidad de código de depuración activo en Fortinet FortiClientWindows 7.4.0 a 7.4.3, FortiClientWindows 7.2.0 a 7.2.10, FortiClientWindows 7.0 todas las versiones puede permitir a un atacante local ejecutar la aplicación paso a paso y recuperar la contraseña de usuario VPN guardada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-18T19:23:59.798097Z","id":"CVE-2025-54660","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-489"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.11","matchCriteriaId":"0C662A78-C87B-4527-858D-5184C654B804"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"51121FCA-2CA9-4B4B-A27C-C4729AB797BB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-844","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-54821","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:03.490","lastModified":"2026-10-20T08:16:42.093","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow an authenticated administrator to bypass the trusted host policy via crafted CLI command."},{"lang":"es","value":"Una vulnerabilidad de Gestión de Privilegios Inadecuada [CWE-269] en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4 todas las versiones, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones, FortiPAM 1.6.0, FortiPAM 1.5 todas las versiones, FortiPAM 1.4 todas las versiones, FortiPAM 1.3 todas las versiones, FortiPAM 1.2 todas las versiones, FortiPAM 1.1 todas las versiones, FortiPAM 1.0 todas las versiones, FortiProxy 7.6.0 hasta 7.6.3, FortiProxy 7.4 todas las versiones, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones podría permitir a un administrador autenticado eludir la política de host confiable mediante un comando CLI manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.11","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.6.0","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":1.9,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.5,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-18T20:04:52.328701Z","id":"CVE-2025-54821","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.6.4","matchCriteriaId":"4DA70753-E996-4081-9C13-7F60AC993B09"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.6.1","matchCriteriaId":"EB0F5A7C-02C2-4D67-92BC-15380F86A373"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.6.4","matchCriteriaId":"A70BE83D-8851-47DB-9360-B5B2E7CAE1ED"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-545","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-54971","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:03.680","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission  to get the external resources password via the logs of the product"},{"lang":"es","value":"Una vulnerabilidad de exposición de información sensible a un actor no autorizado en Fortinet FortiADC 7.4.0, FortiADC 7.2 todas las versiones, FortiADC 7.1 todas las versiones, FortiADC 7.0 todas las versiones, FortiADC 6.2 todas las versiones podría permitir a un administrador con permiso de solo lectura obtener la contraseña de los recursos externos a través de los registros del producto."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.8:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-19T14:16:46.116202Z","id":"CVE-2025-54971","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndExcluding":"7.4.3","matchCriteriaId":"31187E7F-51A7-4397-A04A-07F45593E090"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-686","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-54972","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:03.890","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2 all versions, FortiMail 7.0 all versions may allow an attacker to inject headers in the response via convincing a user to click on a specifically crafted link"},{"lang":"es","value":"Una neutralización incorrecta de secuencias CRLF ('inyección CRLF') en Fortinet FortiMail 7.6.0 a 7.6.3, FortiMail 7.4.0 a 7.4.5, FortiMail 7.2 todas las versiones, FortiMail 7.0 todas las versiones puede permitir a un atacante inyectar encabezados en la respuesta al convencer a un usuario de hacer clic en un enlace específicamente diseñado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-19T14:27:05.795266Z","id":"CVE-2025-54972","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-93"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.6","matchCriteriaId":"5982EF2E-C0FD-4FEB-B275-A69EAE436C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"6F11D4E8-2671-408A-8028-005ABD367084"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-634","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-58034","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:05.057","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands."},{"lang":"es","value":"Una vulnerabilidad [CWE-78] de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comandos') en Fortinet FortiWeb 8.0.0 hasta 8.0.1, FortiWeb 7.6.0 hasta 7.6.5, FortiWeb 7.4.0 hasta 7.4.10, FortiWeb 7.2.0 hasta 7.2.11, FortiWeb 7.0.0 hasta 7.0.11 puede permitir a un atacante autenticado ejecutar código no autorizado en el sistema subyacente mediante solicitudes HTTP manipuladas o comandos CLI."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.2","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-19T04:55:37.672981Z","id":"CVE-2025-58034","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-11-18","cisaActionDue":"2025-11-25","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiWeb OS Command Injection Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"CDE13E2A-CEC3-4FC7-98AD-11CA1EAEC0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"551127B2-DCE9-403D-8073-ACD717CD0B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.11","matchCriteriaId":"F43B659D-6EA7-46F5-9778-0FD0FD036AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.6","matchCriteriaId":"1E5D27F6-0659-4D98-9585-FD84B433CCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.2","matchCriteriaId":"F1DD8ABA-9BB5-4ED8-9E34-1CB0752651DF"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-513","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-58034","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2025-58413","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:06.557","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets"},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en pila en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4.0 hasta 7.4.8, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones, FortiOS 6.2 todas las versiones, FortiOS 6.0 todas las versiones, FortiSASE 25.3.b permite al atacante ejecutar código o comandos no autorizados mediante paquetes especialmente diseñados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSASE","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisase:25.3.b:*:*:*:*:*:*:*"],"versions":[{"version":"25.3.b","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-19T04:55:34.277263Z","id":"CVE-2025-58413","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"DFD39229-768E-478E-B92C-BA5C69639338"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:25.3.89:*:*:*:feature:*:*:*","matchCriteriaId":"0E83E849-CE9B-4EFC-AD8B-DEED0C812073"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:25.3.89:*:*:*:mature:*:*:*","matchCriteriaId":"C2949883-ED37-4DC8-8DC5-C4734C3CED00"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-632","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-58692","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:06.963","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an SQL Command (\"SQL Injection\") vulnerability [CWE-89] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad [CWE-89] de neutralización inadecuada de elementos especiales utilizados en un comando SQL (inyección SQL) en Fortinet FortiVoice 7.2.0 a 7.2.2, FortiVoice 7.0.0 a 7.0.7 permite a un atacante autenticado ejecutar código o comandos no autorizados a través de solicitudes HTTP o HTTPS específicamente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-19T04:55:38.338414Z","id":"CVE-2025-58692","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"40DCDAF0-5F6C-41E3-B269-2CAD08D18FE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"9ED85222-4F3D-4B10-91FD-CB476CAF9652"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-666","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-59669","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:07.390","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker with shell access to the device to connect to redis service and access its data"},{"lang":"es","value":"Una vulnerabilidad de credenciales codificadas en Fortinet FortiWeb 7.6.0, FortiWeb 7.4 en todas sus versiones, FortiWeb 7.2 en todas sus versiones, FortiWeb 7.0 en todas sus versiones podría permitir a un atacante autenticado con acceso de shell al dispositivo conectarse al servicio redis y acceder a sus datos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.11","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-18T19:34:43.188216Z","id":"CVE-2025-59669","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.6.1","matchCriteriaId":"0761B0F5-A978-4C08-A19B-6A27709EB1D2"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-843","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-61713","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-18T17:16:07.630","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated attacker with read-write admin privileges to the CLI to obtain other administrators' credentials via diagnose commands."},{"lang":"es","value":"Una vulnerabilidad de almacenamiento de información sensible en texto claro en memoria [CWE-316] en Fortinet FortiPAM 1.6.0, todas las versiones de FortiPAM 1.5, todas las versiones de FortiPAM 1.4, todas las versiones de FortiPAM 1.3, todas las versiones de FortiPAM 1.2, todas las versiones de FortiPAM 1.1, y todas las versiones de FortiPAM 1.0 puede permitir a un atacante autenticado con privilegios de administrador de lectura y escritura para la CLI obtener las credenciales de otros administradores a través de comandos de diagnóstico."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.6.0","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.6,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-18T19:10:28.194971Z","id":"CVE-2025-61713","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-316"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.6.1","matchCriteriaId":"EB0F5A7C-02C2-4D67-92BC-15380F86A373"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-789","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-65933","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-19T04:16:05.500","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65934","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-19T04:16:05.603","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65935","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-19T04:16:05.680","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65936","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-19T04:16:05.760","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65937","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-19T04:16:05.830","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65938","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-19T04:16:05.900","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65939","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-19T04:16:05.983","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65940","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-19T04:16:06.057","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-65941","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-19T04:16:06.130","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-58412","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-19T10:15:45.257","lastModified":"2026-10-18T20:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.0, FortiADC 7.6.0 through 7.6.3, FortiADC 7.4 all versions, FortiADC 7.2 all versions may allow attacker to execute unauthorized code or commands via crafted URL."},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de etiquetas HTML relacionadas con scripts en una página web (XSS básico) en Fortinet FortiADC 8.0.0, FortiADC 7.6.0 hasta 7.6.3, FortiADC 7.4 en todas sus versiones, FortiADC 7.2 en todas sus versiones puede permitir al atacante ejecutar código o comandos no autorizados a través de una URL manipulada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiADC","defaultStatus":"unaffected","cpes":["cpe:2.3:h:fortinet:fortiadc:8.0.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.6.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.6.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.6.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.6.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.9:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.8:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.8:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.7:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.6:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.5:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.4:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.3:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.2:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.1:*:*:*:*:*:*:*","cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-20T04:55:22.316078Z","id":"CVE-2025-58412","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-80"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.6.4","matchCriteriaId":"026A9B16-7DB1-4488-B13D-F61272BAE7F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiadc:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE5091E7-982E-451B-B782-4C9669421558"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-736","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-66179","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-25T04:15:45.880","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66180","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-25T04:15:45.973","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66181","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-25T04:15:46.030","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66182","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-25T04:15:46.097","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66183","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-25T04:15:46.170","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66184","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-25T04:15:46.233","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66185","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-25T04:15:46.303","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66186","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-25T04:15:46.373","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66187","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-25T04:15:46.443","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66228","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-26T04:15:56.820","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66229","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-26T04:15:57.327","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66230","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-26T04:15:57.393","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66231","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-26T04:15:57.467","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66232","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-26T04:15:57.540","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66233","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-26T04:15:57.603","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66234","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-26T04:15:57.677","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66235","sourceIdentifier":"psirt@fortinet.com","published":"2025-11-26T04:15:57.743","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66536","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-05T04:16:00.537","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66537","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-05T04:16:00.640","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66538","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-05T04:16:00.717","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66539","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-05T04:16:00.787","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66540","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-05T04:16:00.857","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66541","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-05T04:16:00.927","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66542","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-05T04:16:00.993","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66543","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-05T04:16:01.070","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-66544","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-05T04:16:01.137","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-47570","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:47.590","lastModified":"2026-10-02T00:10:00.180","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3, 7.2.0 through 7.2.11; FortiPAM 1.4 all versions, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiSRA 1.4 all versions may allow a read-only administrator to retrieve API tokens of other administrators via observing REST API logs, if REST API logging is enabled (non-default configuration)."},{"lang":"es","value":"Una vulnerabilidad de inserción de información sensible en archivos de registro [CWE-532] en FortiOS 7.4.0 a 7.4.3, 7.2.0 a 7.2.7, 7.0 todas las versiones; FortiProxy 7.4.0 a 7.4.3, 7.2.0 a 7.2.11; FortiPAM 1.4 todas las versiones, 1.3 todas las versiones, 1.2 todas las versiones, 1.1 todas las versiones, 1.0 todas las versiones y FortiSRA 1.4 todas las versiones puede permitir a un administrador de solo lectura recuperar tokens de API de otros administradores mediante la observación de los registros de la API REST, si el registro de la API REST está habilitado (configuración no predeterminada)."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSASE","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisase:24.1.10:*:*:*:*:*:*:*"],"versions":[{"version":"24.1.10","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSRA","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisra:1.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisra:1.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisra:1.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisra:1.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.4","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-10T04:57:25.858238Z","id":"CVE-2024-47570","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"C8B93C73-1E94-4854-8405-C3689860A74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3F2C29AD-A11F-4A5F-8BB0-8600D5F77E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:24.1.37:*:*:*:*:*:*:*","matchCriteriaId":"9BB4EFCB-CE5B-4B56-A010-44678E011B0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisra:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndIncluding":"1.4.3","matchCriteriaId":"E5DE63FB-58DD-4812-83B0-E67A578ED138"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.4","versionEndIncluding":"7.0.17","matchCriteriaId":"A506930A-6DA7-4F7F-957B-500C644284D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"A6D2A14F-3916-45A0-AD4D-27C60E00AEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"1FDDB5F3-D229-4208-9110-8860A03C8B59"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.4.3","matchCriteriaId":"99C56A5F-D835-41CC-B162-49EFB8CF185A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-268","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53679","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:53.477","lastModified":"2026-10-08T10:10:00.227","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox Cloud 24.1, FortiSandbox Cloud 23 all versions allows a remote privileged attacker to execute unauthorized code or commands via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando del sistema operativo ('Inyección de comandos del sistema operativo') vulnerabilidad [CWE-78] vulnerabilidad en Fortinet FortiSandbox 5.0.0 hasta 5.0.2, FortiSandbox 4.4.0 hasta 4.4.7, FortiSandbox 4.2 todas las versiones, FortiSandbox 4.0 todas las versiones, FortiSandbox Cloud 24.1, FortiSandbox Cloud 23 todas las versiones permite a un atacante remoto privilegiado ejecutar código o comandos no autorizados a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.2","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.7","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxcloud:24.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:23.4:*:*:*:*:*:*:*"],"versions":[{"version":"24.1","status":"affected"},{"version":"23.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-10T04:57:29.061841Z","id":"CVE-2025-53679","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.4.8","matchCriteriaId":"C0B145A7-83A1-4ED2-A9DC-109CAB0AB217"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.3","matchCriteriaId":"7A1CEA31-8309-4B13-8A3C-4830394A728D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"23.1.4245","versionEndExcluding":"23.4.4374","matchCriteriaId":"31574D18-7175-4634-B191-99080F0FAF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:24.1.4436:*:*:*:*:*:*:*","matchCriteriaId":"529FB46C-C0E5-43F5-A753-DD9E928FD4E6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-454","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53949","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:53.640","lastModified":"2026-10-08T10:10:00.227","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de Neutralización Incorrecta de Elementos Especiales utilizados en un Comando de SO ('Inyección de Comandos de SO') [CWE-78] vulnerabilidad en Fortinet FortiSandbox 5.0.0 hasta 5.0.2, FortiSandbox 4.4.0 hasta 4.4.7, FortiSandbox 4.2 todas las versiones, FortiSandbox 4.0 todas las versiones puede permitir a un atacante autenticado ejecutar código no autorizado en el sistema subyacente a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.2","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.7","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-10T04:57:30.387619Z","id":"CVE-2025-53949","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.6","matchCriteriaId":"6AD9ECD5-FE5A-4772-A53A-04769828A110"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.8","matchCriteriaId":"814D77BE-F536-42DE-B068-F92B95D68248"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndIncluding":"4.4.7","matchCriteriaId":"08D2984D-3F90-42A6-9DC9-5E853E7B3188"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.2","matchCriteriaId":"C5335FAF-6569-44CE-8634-0991C738CCF9"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-479","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-54353","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:53.973","lastModified":"2026-10-08T10:10:00.227","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an attacker to perform an XSS attack via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de Neutralización Inadecuada de Entrada Durante la Generación de Páginas Web ('cross-site scripting') [CWE-79] vulnerabilidad en Fortinet FortiSandbox 5.0.0 hasta 5.0.2, FortiSandbox 4.4.0 hasta 4.4.7, FortiSandbox 4.2 todas las versiones, FortiSandbox 4.0 todas las versiones puede permitir a un atacante realizar un ataque XSS mediante solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.2","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.7","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-09T20:19:54.050211Z","id":"CVE-2025-54353","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.6","matchCriteriaId":"6AD9ECD5-FE5A-4772-A53A-04769828A110"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.8","matchCriteriaId":"814D77BE-F536-42DE-B068-F92B95D68248"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndIncluding":"4.4.7","matchCriteriaId":"08D2984D-3F90-42A6-9DC9-5E853E7B3188"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.2","matchCriteriaId":"C5335FAF-6569-44CE-8634-0991C738CCF9"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-477","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-54838","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:54.133","lastModified":"2026-10-14T21:10:00.183","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de autorización incorrecta [CWE-863] en FortiPortal 7.4.0 hasta 7.4.5 podría permitir a un atacante autenticado reiniciar un dispositivo FortiGate compartido mediante solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.3,"impactScore":4.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-09T20:20:41.764169Z","id":"CVE-2025-54838","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.5","matchCriteriaId":"96A22791-08D1-4A09-9D87-BE0308B7FBDD"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-032","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-57823","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:54.480","lastModified":"2026-10-08T10:10:00.227","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow an authenticated attacker with at least sponsor permissions to read and download device logs via accessing specific endpoints"},{"lang":"es","value":"Una vulnerabilidad de solicitud directa ('navegación forzada') en Fortinet FortiAuthenticator 6.6.0 hasta 6.6.6, FortiAuthenticator 6.5 todas las versiones, FortiAuthenticator 6.4 todas las versiones, FortiAuthenticator 6.3 todas las versiones puede permitir a un atacante autenticado con al menos permisos de patrocinador leer y descargar registros del dispositivo mediante el acceso a puntos finales específicos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.6.0","lessThanOrEqual":"6.6.6","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-09T20:21:04.998926Z","id":"CVE-2025-57823","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-425"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.6.6","matchCriteriaId":"D8E31FF4-4BA1-4835-91DF-C8DF310BF8E8"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-554","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-59718","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:54.983","lastModified":"2026-06-17T09:46:35.807","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message."},{"lang":"es","value":"Una vulnerabilidad de verificación incorrecta de firma criptográfica en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4.0 hasta 7.4.8, FortiOS 7.2.0 hasta 7.2.11, FortiOS 7.0.0 hasta 7.0.17, FortiProxy 7.6.0 hasta 7.6.3, FortiProxy 7.4.0 hasta 7.4.10, FortiProxy 7.2.0 hasta 7.2.14, FortiProxy 7.0.0 hasta 7.0.21, FortiSwitchManager 7.2.0 hasta 7.2.6, FortiSwitchManager 7.0.0 hasta 7.0.5 permite a un atacante no autenticado eludir la autenticación de inicio de sesión SSO de FortiCloud a través de un mensaje de respuesta SAML manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.21","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-17T04:55:21.365957Z","id":"CVE-2025-59718","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-12-16","cisaActionDue":"2025-12-23","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.22","matchCriteriaId":"FD1BE28E-8FDA-4DA9-9DA8-EF5266CD3C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.15","matchCriteriaId":"4B2E82CF-00E9-4D67-B472-E54A325F87FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.11","matchCriteriaId":"F989EFB6-A5C9-414B-A85B-786D309B41AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"11CA0204-FD63-4614-821E-E2C4E34F7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"F1B9AA70-BB46-403B-94C1-D94C64E22334"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"EE22A407-02CB-4979-A38D-9EBAFEB350F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.18","matchCriteriaId":"BCEB8B8A-797C-4E5E-BCDB-A54EB83AD8A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"E8FAAA2E-7A53-4F6B-A9C7-1E2B4CB5F7EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"2093EFE3-4B7F-4806-9850-C42B26BC64AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"37FDCA69-9049-40B4-88AF-F476901022B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*","matchCriteriaId":"B89A6863-B602-4404-8D26-337FECABFFF0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-647","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://arcticwolf.com/resources/blog/arctic-wolf-observes-malicious-sso-logins-following-disclosure-cve-2025-59718-cve-2025-59719/","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59718","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2025-59719","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:55.150","lastModified":"2026-06-17T09:46:35.997","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message."},{"lang":"es","value":"Una vulnerabilidad de verificación impropia de firma criptográfica en Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 hasta 7.6.4, FortiWeb 7.4.0 hasta 7.4.9 puede permitir a un atacante no autenticado eludir la autenticación de inicio de sesión de FortiCloud SSO a través de un mensaje de respuesta SAML manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-10T04:57:28.019701Z","id":"CVE-2025-59719","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.9","matchCriteriaId":"87CA4C4B-2701-4DEB-BB36-DBBFBD19D48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.4","matchCriteriaId":"8473958D-E679-4501-8D78-5350FA8FC1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6578F992-46E7-422C-A837-5A7F0E966AB6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-647","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-59808","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:55.337","lastModified":"2026-10-14T21:10:00.183","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an attacker who has already gained access to a victim's user account to reset the account credentials without being prompted for the account's password"},{"lang":"es","value":"Una vulnerabilidad de cambio de contraseña no verificado [CWE-620] vulnerabilidad en Fortinet FortiSOAR PaaS 7.6.0 hasta 7.6.2, FortiSOAR PaaS 7.5.0 hasta 7.5.1, FortiSOAR PaaS 7.4 en todas las versiones, FortiSOAR PaaS 7.3 en todas las versiones, FortiSOAR on-premise 7.6.0 hasta 7.6.2, FortiSOAR on-premise 7.5.0 hasta 7.5.1, FortiSOAR on-premise 7.4 en todas las versiones, FortiSOAR on-premise 7.3 en todas las versiones puede permitir a un atacante que ya ha obtenido acceso a la cuenta de usuario de una víctima restablecer las credenciales de la cuenta sin que se le solicite la contraseña de la cuenta."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoaron-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-09T20:20:31.034553Z","id":"CVE-2025-59808","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-620"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.5.2","matchCriteriaId":"AB556BB9-A061-45DD-AB46-C583B7CB5108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.3","matchCriteriaId":"DEB8A1CE-2EB8-43B7-9E9A-0106BF54631E"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-599","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-59810","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:55.500","lastModified":"2026-10-14T21:10:00.183","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow information disclosure to an authenticated attacker via crafted requests"},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado en Fortinet FortiSOAR PaaS 7.6.0 hasta 7.6.2, FortiSOAR PaaS 7.5.0 hasta 7.5.1, FortiSOAR PaaS 7.4 todas las versiones, FortiSOAR PaaS 7.3 todas las versiones, FortiSOAR local 7.6.0 hasta 7.6.2, FortiSOAR local 7.5.0 hasta 7.5.1, FortiSOAR local 7.4 todas las versiones, FortiSOAR local 7.3 todas las versiones podría permitir la revelación de información a un atacante autenticado mediante solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoaron-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-09T20:20:18.195341Z","id":"CVE-2025-59810","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.5.2","matchCriteriaId":"AB556BB9-A061-45DD-AB46-C583B7CB5108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"9F88A820-7AAA-49BB-87AB-E93693B9889F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-601","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-59923","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:55.663","lastModified":"2026-10-14T21:10:00.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow an authenticated attacker with at least read-only admin permission to obtain the credentials of other administrators' messaging services via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de control de acceso indebido en Fortinet FortiAuthenticator 6.6.0 hasta 6.6.4, FortiAuthenticator 6.5 todas las versiones, FortiAuthenticator 6.4 todas las versiones, FortiAuthenticator 6.3 todas las versiones puede permitir a un atacante autenticado con al menos permiso de administrador de solo lectura obtener las credenciales de los servicios de mensajería de otros administradores a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.6.0","lessThanOrEqual":"6.6.6","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-09T20:21:28.611253Z","id":"CVE-2025-59923","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndIncluding":"6.6.4","matchCriteriaId":"AC1A8077-94C7-4F49-B819-5A19492C7509"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-616","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-60024","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:15:55.820","lastModified":"2026-09-25T23:10:00.463","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 may allow a privileged authenticated attacker to write arbitrary files via specifically HTTP or HTTPS commands"},{"lang":"es","value":"Múltiples Limitaciones incorrectas de un nombre de ruta a un directorio restringido ('Salto de ruta') vulnerabilidades [CWE-22] vulnerabilidad en Fortinet FortiVoice 7.2.0 hasta 7.2.2, FortiVoice 7.0.0 hasta 7.0.7 puede permitir a un atacante autenticado privilegiado escribir archivos arbitrarios mediante comandos específicamente HTTP o HTTPS."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-10T04:57:32.504363Z","id":"CVE-2025-60024","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"40DCDAF0-5F6C-41E3-B269-2CAD08D18FE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"9ED85222-4F3D-4B10-91FD-CB476CAF9652"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-812","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-62631","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:16:03.850","lastModified":"2026-10-14T21:10:00.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session not terminated after a user's password change under particular conditions outside of the attacker's control"},{"lang":"es","value":"Una vulnerabilidad de expiración insuficiente de sesión [CWE?613] en Fortinet FortiOS?7.4.0, FortiOS?7.2 todas las versiones, FortiOS?7.0 todas las versiones y FortiOS?6.4 todas las versiones permite al atacante mantener acceso a los recursos de red mediante una sesión SSLVPN activa que no se termina tras el cambio de contraseña de un usuario bajo condiciones particulares fuera del control del atacante."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-09T20:20:54.389564Z","id":"CVE-2025-62631","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-613"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.1","matchCriteriaId":"302596F5-7F5F-4E20-8A85-6183A9FCB5BB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-411","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-64153","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:16:04.910","lastModified":"2026-10-14T21:10:00.183","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through 7.4.7, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via a specific HTTP request."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comandos') en Fortinet FortiExtender 7.6.0 hasta 7.6.3, FortiExtender 7.4.0 hasta 7.4.7, FortiExtender 7.2 todas las versiones, FortiExtender 7.0 todas las versiones puede permitir a un atacante autenticado ejecutar código o comandos no autorizados a través de una solicitud HTTP específica."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiExtender","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiextender:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiextender:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-09T20:21:16.823596Z","id":"CVE-2025-64153","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.4","matchCriteriaId":"52A6C42E-B444-4E9D-8DDE-377FDF85FA68"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.5","matchCriteriaId":"F1826FE1-179E-4430-8BBC-9C675CB935EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.7","matchCriteriaId":"A92771D8-F90D-471B-839C-D052A7B025B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.3","matchCriteriaId":"AE580F12-320B-4795-8B70-5CA7C6B350EB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fortinet:fortiextender:-:*:*:*:*:*:*:*","matchCriteriaId":"A0617C1D-E321-409D-B54B-775E854A03C1"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-739","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-64156","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:16:05.070","lastModified":"2026-09-25T23:10:00.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7, FortiVoice 6.4 all versions, FortiVoice 6.0 all versions may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted requests"},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando SQL ('inyección SQL') vulnerabilidad en Fortinet FortiVoice 7.2.0 hasta 7.2.1, FortiVoice 7.0.0 hasta 7.0.7, FortiVoice 6.4 todas las versiones, FortiVoice 6.0 todas las versiones puede permitir a un atacante privilegiado autenticado ejecutar código o comandos no autorizados a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-10T04:57:31.437060Z","id":"CVE-2025-64156","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.12","matchCriteriaId":"C0B44874-E530-40B9-92F5-03667CFB9F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.11","matchCriteriaId":"939D1D33-71FB-41B6-950F-7FA3A873FBB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.7","matchCriteriaId":"3D5BBE03-68A7-4852-BCD5-67CFB7CAD155"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.1","matchCriteriaId":"6AC1D7F3-43FD-4634-ABE5-2D17D4F9B0CC"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-362","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-64447","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:16:05.227","lastModified":"2026-09-25T23:10:00.463","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an unauthenticated attacker to execute arbitrary operations on the system via crafted HTTP or HTTPS request via forged cookies, requiring prior knowledge of the FortiWeb serial number."},{"lang":"es","value":"Una vulnerabilidad de dependencia de las cookies sin validación y verificación de integridad en Fortinet FortiWeb 8.0.0 a 8.0.1, FortiWeb 7.6.0 a 7.6.5, FortiWeb 7.4.0 a 7.4.10, FortiWeb 7.2.0 a 7.2.11, FortiWeb 7.0.0 a 7.0.11 puede permitir a un atacante no autenticado ejecutar operaciones arbitrarias en el sistema a través de una solicitud HTTP o HTTPS manipulada mediante cookies falsificadas, que requiere conocimiento previo del número de serie de FortiWeb."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-10T04:57:33.641740Z","id":"CVE-2025-64447","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-565"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.11","matchCriteriaId":"9B46A0B2-ED2C-4836-8E72-CE1D4F3545E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.11","matchCriteriaId":"E60D5043-7CE7-4DD1-B2DB-B6B08ABFAD13"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.10","matchCriteriaId":"FF87852D-C4E8-441A-9443-CB0BA0812568"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.5","matchCriteriaId":"A162A55D-A22C-43F3-A77A-B8FB8214D6C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.1","matchCriteriaId":"2A628CC4-1789-4DAB-AFF0-96EDD7AEF0A6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-945","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-64471","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-09T18:16:05.403","lastModified":"2026-09-25T23:10:00.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an unauthenticated attacker to use the hash in place of the password to authenticate via crafted HTTP/HTTPS requests"},{"lang":"es","value":"Una vulnerabilidad de uso de hash de contraseña en lugar de contraseña para autenticación [CWE-836] vulnerabilidad en Fortinet FortiWeb 8.0.0 hasta 8.0.1, FortiWeb 7.6.0 hasta 7.6.4, FortiWeb 7.4.0 hasta 7.4.10, FortiWeb 7.2.0 hasta 7.2.11, FortiWeb 7.0.0 hasta 7.0.11 puede permitir a un atacante no autenticado usar el hash en lugar de la contraseña para autenticarse a través de solicitudes HTTP/HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-09T18:34:29.978564Z","id":"CVE-2025-64471","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-836"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.11","matchCriteriaId":"9B46A0B2-ED2C-4836-8E72-CE1D4F3545E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.11","matchCriteriaId":"E60D5043-7CE7-4DD1-B2DB-B6B08ABFAD13"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.10","matchCriteriaId":"FF87852D-C4E8-441A-9443-CB0BA0812568"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.4","matchCriteriaId":"8473958D-E679-4501-8D78-5350FA8FC1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.1","matchCriteriaId":"2A628CC4-1789-4DAB-AFF0-96EDD7AEF0A6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-984","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-67605","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-10T04:15:58.077","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67606","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-10T04:15:58.140","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67607","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-10T04:15:58.210","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67608","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-10T04:15:58.270","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67609","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-10T04:15:58.340","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67610","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-10T04:15:58.403","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67611","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-10T04:15:58.463","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67612","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-10T04:15:58.527","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67613","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-10T04:15:58.593","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67686","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-11T04:15:59.110","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67687","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-11T04:15:59.193","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67688","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-11T04:15:59.263","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67689","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-11T04:15:59.323","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67690","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-11T04:15:59.390","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67691","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-11T04:15:59.450","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67692","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-11T04:15:59.507","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67693","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-11T04:15:59.570","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67694","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-11T04:15:59.633","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2024-40593","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-11T15:15:46.243","lastModified":"2026-10-02T00:10:00.180","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiOS 7.6.0, FortiOS 7.4.4, FortiOS 7.2.7, FortiOS 7.0.14, FortiPortal 6.0 all versions may allow an authenticated admin to retrieve a certificate's private key via the device's admin shell."},{"lang":"es","value":"Una vulnerabilidad de errores de gestión de claves en Fortinet FortiAnalyzer 7.4.0 hasta 7.4.2, FortiAnalyzer 7.2.0 hasta 7.2.5, FortiAnalyzer 7.0 todas las versiones, FortiAnalyzer 6.4 todas las versiones, FortiManager 7.4.0 hasta 7.4.2, FortiManager 7.2.0 hasta 7.2.5, FortiManager 7.0 todas las versiones, FortiManager 6.4 todas las versiones, FortiOS 7.6.0, FortiOS 7.4.4, FortiOS 7.2.7, FortiOS 7.0.14, FortiPortal 6.0 todas las versiones podría permitir a un administrador autenticado recuperar la clave privada de un certificado a través de la shell de administración del dispositivo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:6.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.4","status":"affected"},{"version":"7.2.7","status":"affected"},{"version":"7.0.14","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.5,"impactScore":4.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-11T14:46:49.254598Z","id":"CVE-2024-40593","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-320"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"F07BE2AB-5F28-4773-B9C3-1D76EA1C2D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"AF309EFD-1770-44AF-B192-3D9816F792CB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.6","matchCriteriaId":"71CC4AA3-04CC-49CA-A012-E28C4D1F11DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","matchCriteriaId":"71294A46-2667-4213-BA04-542291BC5D58"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","matchCriteriaId":"AA6A7535-6EDF-4792-8AC4-ADFF40811E08"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"3B543474-445F-431D-A06A-63F566798BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.15","matchCriteriaId":"A52BD29D-7295-48A1-9B89-86517C9AA5AE"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-133","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-67863","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-13T16:16:54.760","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67864","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-13T16:16:54.840","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67865","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-13T16:16:54.897","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67866","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-13T16:16:54.957","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67867","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-13T16:16:55.013","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67868","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-13T16:16:55.073","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67869","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-13T16:16:55.130","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67870","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-13T16:16:55.180","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-67871","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-13T16:16:55.233","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68483","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-19T04:16:01.603","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68484","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-19T04:16:01.690","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68485","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-19T04:16:01.760","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68486","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-19T04:16:01.817","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68487","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-19T04:16:01.883","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68488","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-19T04:16:01.953","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68489","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-19T04:16:02.017","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68490","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-19T04:16:02.083","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68491","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-19T04:16:02.150","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68650","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-23T04:15:46.027","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68651","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-23T04:15:46.510","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68652","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-23T04:15:46.570","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68653","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-23T04:15:46.630","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68654","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-23T04:15:46.690","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68655","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-23T04:15:46.750","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68687","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-24T04:15:55.920","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68688","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-24T04:15:56.057","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68689","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-24T04:15:56.120","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68690","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-24T04:15:56.180","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68691","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-24T04:15:56.237","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68692","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-24T04:15:56.300","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68693","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-24T04:15:56.360","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68694","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-24T04:15:56.420","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-68695","sourceIdentifier":"psirt@fortinet.com","published":"2025-12-24T04:15:56.477","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21644","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-03T04:15:50.813","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21645","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-03T04:15:51.333","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21646","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-03T04:15:51.407","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21647","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-03T04:15:51.467","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21648","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-03T04:15:51.520","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21649","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-03T04:15:51.580","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21650","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-03T04:15:51.643","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21651","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-03T04:15:51.700","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21652","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-03T04:15:51.760","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21744","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-06T04:15:54.540","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21745","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-06T04:15:54.620","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21746","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-06T04:15:54.677","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21747","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-06T04:15:54.737","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21748","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-06T04:15:54.800","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21749","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-06T04:15:54.853","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21750","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-06T04:15:54.913","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22156","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-07T12:17:08.167","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22157","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-07T12:17:08.247","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22158","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-07T12:17:08.307","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22159","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-07T12:17:08.367","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22160","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-07T12:17:08.430","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22161","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-07T12:17:08.480","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22162","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-07T12:17:08.537","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22577","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-08T04:15:56.880","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22578","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-08T04:15:56.963","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22579","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-08T04:15:57.023","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22580","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-08T04:15:57.080","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22581","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-08T04:15:57.143","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22630","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-09T04:15:44.460","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22631","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-09T04:15:44.603","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22632","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-09T04:15:44.667","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22633","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-09T04:15:44.723","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22634","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-09T04:15:44.783","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22635","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-09T04:15:44.847","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22636","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-09T04:15:44.910","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22829","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T04:15:48.507","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22830","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T04:15:49.050","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22831","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T04:15:49.113","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22832","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T04:15:49.173","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22833","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T04:15:49.237","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22834","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T04:15:49.303","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22835","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T04:15:49.357","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22836","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T04:15:49.423","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-22837","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T04:15:49.500","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-25249","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T17:15:56.910","lastModified":"2026-10-07T18:17:13.180","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets"},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en montículo en Fortinet FortiOS 7.6.0 a 7.6.3, FortiOS 7.4.0 a 7.4.8, FortiOS 7.2.0 a 7.2.11, FortiOS 7.0.0 a 7.0.17, FortiOS 6.4.0 a 6.4.16, FortiSwitchManager 7.2.0 a 7.2.6, FortiSwitchManager 7.0.0 a 7.0.5 permite al atacante ejecutar código o comandos no autorizados a través de paquetes especialmente diseñados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.2","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.4","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-10T03:55:15.906990Z","id":"CVE-2025-25249","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-09-09","cisaActionDue":"2026-09-12","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.18","matchCriteriaId":"7B071609-D589-44A8-8E7A-010B5BAA36EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"E8FAAA2E-7A53-4F6B-A9C7-1E2B4CB5F7EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"2093EFE3-4B7F-4806-9850-C42B26BC64AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"F1B9AA70-BB46-403B-94C1-D94C64E22334"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"EE22A407-02CB-4979-A38D-9EBAFEB350F6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:25.1.39:*:*:*:-:*:*:*","matchCriteriaId":"77B84900-E96D-4E2C-8797-B1460E71874E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisase:25.1.51:*:*:*:-:*:*:*","matchCriteriaId":"12A8EE3F-EEAF-460D-B2DB-551509DF0814"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"37FDCA69-9049-40B4-88AF-F476901022B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*","matchCriteriaId":"B89A6863-B602-4404-8D26-337FECABFFF0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-084","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"]},{"url":"https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25249","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2025-47855","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T17:15:57.520","lastModified":"2026-06-17T09:28:45.920","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3.0.13 through 3.0.23 allows an unauthenticated attacker to obtain the device configuration via crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad [CWE-200] de exposición de información sensible a un actor no autorizado en Fortinet FortiFone 7.0.0 hasta 7.0.1, FortiFone 3.0.13 hasta 3.0.23 permite a un atacante no autenticado obtener la configuración del dispositivo a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiFone","defaultStatus":"unaffected","versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"},{"version":"3.0.13","lessThanOrEqual":"3.0.23","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-13T21:40:59.597483Z","id":"CVE-2025-47855","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-260","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2025-58693","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T17:15:57.940","lastModified":"2026-06-17T09:44:45.540","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido ('salto de ruta') en Fortinet FortiVoice 7.2.0 hasta 7.2.2, FortiVoice 7.0.0 hasta 7.0.7 permite a un atacante privilegiado eliminar archivos del sistema de archivos subyacente a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-13T21:40:06.891342Z","id":"CVE-2025-58693","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.8","matchCriteriaId":"40DCDAF0-5F6C-41E3-B269-2CAD08D18FE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.3","matchCriteriaId":"9ED85222-4F3D-4B10-91FD-CB476CAF9652"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-778","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-59922","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T17:15:58.147","lastModified":"2026-06-17T09:46:52.380","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.0 through 7.2.10, FortiClientEMS 7.0 all versions may allow an authenticated attacker with at least read-only admin permission to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando SQL (vulnerabilidad de 'inyección SQL') vulnerabilidad [CWE-89] vulnerabilidad en Fortinet FortiClientEMS 7.4.3 hasta 7.4.4, FortiClientEMS 7.4.0 hasta 7.4.1, FortiClientEMS 7.2.0 hasta 7.2.10, FortiClientEMS 7.0 todas las versiones puede permitir a un atacante autenticado con al menos permiso de administrador de solo lectura ejecutar código o comandos SQL no autorizados a través de solicitudes HTTP o HTTPS manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.3","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-13T21:39:37.452586Z","id":"CVE-2025-59922","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.12","matchCriteriaId":"5C1EAB51-F99B-4430-AA88-C8B0A4D9F7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"082FFC77-0B95-4B1D-AEBE-D080B9B3C98C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-735","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-64155","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T17:15:58.440","lastModified":"2026-06-17T09:53:55.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via  crafted TCP requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando de sistema operativo ('inyección de comandos de sistema operativo') en Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 a 7.3.4, FortiSIEM 7.1.0 a 7.1.8, FortiSIEM 7.0.0 a 7.0.4, FortiSIEM 6.7.0 a 6.7.10 puede permitir a un atacante ejecutar código o comandos no autorizados a través de solicitudes TCP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.10:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.4","versionType":"semver","status":"affected"},{"version":"7.2.6","status":"affected"},{"version":"7.1.8","status":"affected"},{"version":"7.0.4","status":"affected"},{"version":"6.7.10","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-14T04:57:28.543992Z","id":"CVE-2025-64155","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.0","versionEndExcluding":"7.1.9","matchCriteriaId":"409EC360-68C2-4098-AC99-8310913D8EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.7","matchCriteriaId":"2A8C7360-73D5-4629-B1C3-47B6C7AD9678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.5","matchCriteriaId":"C41BBF42-F97A-4358-ADB6-9762BD8F3CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"500DAB25-48C9-48C7-B7CD-92C06989F039"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-772","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/horizon3ai/CVE-2025-64155","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/purehate/CVE-2025-64155-hunter","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2025-67685","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-13T17:15:58.873","lastModified":"2026-06-17T09:57:59.810","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 all versions, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated attacker to proxy internal requests limited to plaintext endpoints only via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) [CWE-918] vulnerabilidad en Fortinet FortiSandbox 5.0.0 hasta 5.0.4, FortiSandbox 4.4 todas las versiones, FortiSandbox 4.2 todas las versiones, FortiSandbox 4.0 todas las versiones puede permitir a un atacante autenticado redirigir peticiones internas limitadas solo a puntos finales de texto plano a través de peticiones HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.4","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","baseScore":3.8,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-13T21:40:40.225433Z","id":"CVE-2025-67685","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"5.0.5","matchCriteriaId":"FA72A521-E480-4B98-8BB3-F549D0126E19"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-783","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-23574","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-15T04:15:57.880","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23575","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-15T04:15:57.980","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23576","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-15T04:15:58.037","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23577","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-15T04:15:58.093","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23578","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-15T04:15:58.150","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23579","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-15T04:15:58.283","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23580","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-15T04:15:58.353","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23581","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-15T04:15:58.410","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23582","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-15T04:15:58.467","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23709","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-16T04:15:49.483","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23710","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-16T04:15:49.563","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23711","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-16T04:15:49.623","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23712","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-16T04:15:49.687","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23713","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-16T04:15:49.747","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23714","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-16T04:15:49.807","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23909","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-20T05:16:16.467","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23910","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-20T05:16:16.600","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23911","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-20T05:16:16.673","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23912","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-20T05:16:16.743","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23913","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-20T05:16:16.817","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23914","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-20T05:16:16.883","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23915","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-20T05:16:16.953","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23916","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-20T05:16:17.030","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-23917","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-20T05:16:17.093","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24020","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-21T05:16:10.780","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24021","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-21T05:16:10.943","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24022","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-21T05:16:11.010","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24023","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-21T05:16:11.077","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24024","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-21T05:16:11.143","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24025","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-21T05:16:11.207","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24026","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-21T05:16:11.270","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24334","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-23T05:16:32.257","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24335","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-23T05:16:32.690","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24336","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-23T05:16:32.823","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24337","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-23T05:16:32.930","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24338","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-23T05:16:33.037","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24339","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-23T05:16:33.187","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24340","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-23T05:16:33.313","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24341","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-23T05:16:33.437","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24342","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-23T05:16:33.570","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24642","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-24T04:15:50.400","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24643","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-24T04:15:50.507","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24644","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-24T04:15:50.570","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24645","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-24T04:15:50.643","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24646","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-24T04:15:50.703","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24647","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-24T04:15:50.773","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24648","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-24T04:15:50.827","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24649","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-24T04:15:50.890","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24858","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-27T20:16:24.477","lastModified":"2026-06-17T10:23:43.040","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager 7.4.0 through 7.4.9, FortiManager 7.2.0 through 7.2.11, FortiManager 7.0.0 through 7.0.15, FortiNAC-F 7.6.3 through 7.6.5, FortiOS 7.6.0 through 7.6.5, FortiOS 7.4.0 through 7.4.10, FortiOS 7.2.0 through 7.2.12, FortiOS 7.0.0 through 7.0.18, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.12, FortiProxy 7.2.0 through 7.2.15, FortiProxy 7.0.0 through 7.0.22, FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices."},{"lang":"es","value":"Una vulnerabilidad de omisión de autenticación usando una ruta o canal alternativo [CWE-288] en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.5, FortiAnalyzer 7.4.0 hasta 7.4.9, FortiAnalyzer 7.2.0 hasta 7.2.11, FortiAnalyzer 7.0.0 hasta 7.0.15, FortiManager 7.6.0 hasta 7.6.5, FortiManager 7.4.0 hasta 7.4.9, FortiManager 7.2.0 hasta 7.2.11, FortiManager 7.0.0 hasta 7.0.15, FortiOS 7.6.0 hasta 7.6.5, FortiOS 7.4.0 hasta 7.4.10, FortiOS 7.2.0 hasta 7.2.12, FortiOS 7.0.0 hasta 7.0.18, FortiProxy 7.6.0 hasta 7.6.4, FortiProxy 7.4.0 hasta 7.4.12, FortiProxy 7.2.0 hasta 7.2.15, FortiProxy 7.0.0 hasta 7.0.22, FortiWeb 8.0.0 hasta 8.0.3, FortiWeb 7.6.0 hasta 7.6.6, FortiWeb 7.4.0 hasta 7.4.11 puede permitir a un atacante con una cuenta de FortiCloud y un dispositivo registrado iniciar sesión en otros dispositivos registrados en otras cuentas, si la autenticación SSO de FortiCloud está habilitada en esos dispositivos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.3","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiNAC-F","defaultStatus":"unaffected","versions":[{"version":"7.6.3","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.18","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.12","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.15","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.22","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.15","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-28T04:55:41.959755Z","id":"CVE-2026-24858","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-01-27","cisaActionDue":"2026-01-30","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.15","matchCriteriaId":"F2B61F1F-19A9-4BA6-B12A-ECA95C5634A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.11","matchCriteriaId":"D467D1D8-1BCF-4A88-8EEE-0D8092C3AE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.10","matchCriteriaId":"BD96750D-104E-4DAE-A19E-8C92E85429F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.6","matchCriteriaId":"BDF7BF56-B998-4AAE-9B6D-C6F009F8B807"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.15","matchCriteriaId":"651E452B-3C1D-4738-BDFF-7234B19C63F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.11","matchCriteriaId":"36D9D75F-B292-4651-8BF0-20AFE2C016C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.10","matchCriteriaId":"3AF70FA9-34D3-4ADF-B87C-A9C31D4DC174"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.6","matchCriteriaId":"357DA889-E7C0-42B6-96A5-83C0D9E6CC69"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.3","versionEndExcluding":"7.6.6","matchCriteriaId":"A43635C7-3F54-43F7-A193-A4C361685A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.22","matchCriteriaId":"63D22275-D430-4F99-9170-C8378FF80242"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.15","matchCriteriaId":"33FE9C6F-F5A1-43E4-917E-32497D6CC5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.12","matchCriteriaId":"DA34D10C-0B80-4A37-94D2-CD05E865E149"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.4","matchCriteriaId":"A26D8D81-00EE-4A11-B693-DE85B912F267"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.11","matchCriteriaId":"64C16483-DF84-43AA-B5D4-FA8939E4F387"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.6","matchCriteriaId":"B40750AD-AE67-42C3-89A5-E64F3D7F0431"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.3","matchCriteriaId":"EDCDD451-D984-4EC9-AB30-42D553FF0BD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.18","matchCriteriaId":"6A0CDFB7-0B78-4B3E-9E19-34E5F2479271"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.12","matchCriteriaId":"25DF0315-DF9C-4C51-9902-ED607B049152"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.11","matchCriteriaId":"2ADAF67E-132B-4810-8919-38AC80BF59F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.6","matchCriteriaId":"96C45B06-625A-4EFE-A720-242E33611B50"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"37FDCA69-9049-40B4-88AF-F476901022B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*","matchCriteriaId":"B89A6863-B602-4404-8D26-337FECABFFF0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-060","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-975644.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-24858","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]},{"url":"https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-24859","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-28T04:16:00.090","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24860","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-28T04:16:00.177","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24861","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-28T04:16:00.237","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24862","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-28T04:16:00.300","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24863","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-28T04:16:00.353","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24864","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-28T04:16:00.413","lastModified":"2026-10-16T16:10:00.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24865","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-28T04:16:00.470","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24866","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-28T04:16:00.527","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-24867","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-28T04:16:00.587","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25090","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-30T05:16:33.630","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25091","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-30T05:16:33.747","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25092","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-30T05:16:33.820","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25093","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-30T05:16:33.900","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25094","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-30T05:16:33.977","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25095","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-30T05:16:34.043","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25096","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-30T05:16:34.120","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25097","sourceIdentifier":"psirt@fortinet.com","published":"2026-01-30T05:16:34.187","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25692","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-06T04:15:52.550","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25693","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-06T04:15:52.630","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25694","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-06T04:15:52.697","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25695","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-06T04:15:52.763","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25696","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-06T04:15:52.827","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25697","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-06T04:15:52.890","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25698","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-06T04:15:52.957","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-21643","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-06T09:15:49.330","lastModified":"2026-06-17T10:18:51.890","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL ('inyección SQL') en Fortinet FortiClientEMS 7.4.4 podría permitir a un atacante no autenticado ejecutar código o comandos no autorizados a través de solicitudes HTTP específicamente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-06T00:00:00+00:00","id":"CVE-2026-21643","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-04-13","cisaActionDue":"2026-04-16","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiClient EMS SQL Injection Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*","matchCriteriaId":"552AF7AC-8630-442C-A7A4-66CA789DC3FD"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-1142","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/0xBlackash/CVE-2026-21643/blob/main/cve-2026-21643.py","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21643","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-25837","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-07T04:15:53.500","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25838","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-07T04:15:53.580","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25839","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-07T04:15:53.643","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25840","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-07T04:15:53.703","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25841","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-07T04:15:53.767","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25842","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-07T04:15:53.823","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25843","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-07T04:15:53.893","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25844","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-07T04:15:53.960","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25845","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-07T04:15:54.017","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25973","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T05:16:17.330","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25974","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T05:16:20.270","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25975","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T05:16:20.373","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25976","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T05:16:20.440","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25977","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T05:16:20.900","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25978","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T05:16:21.333","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25979","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T05:16:21.410","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25980","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T05:16:21.480","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-25981","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T05:16:21.543","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-52436","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T16:16:08.757","lastModified":"2026-06-17T09:36:29.910","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to execute commands via crafted requests."},{"lang":"es","value":"Una neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') vulnerabilidad [CWE-79] vulnerabilidad en Fortinet FortiSandbox 5.0.0 hasta 5.0.1, FortiSandbox 4.4.0 hasta 4.4.7, FortiSandbox 4.2 todas las versiones, FortiSandbox 4.0 todas las versiones puede permitir a un atacante no autenticado ejecutar comandos a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.1","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.7","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-11T04:56:20.214712Z","id":"CVE-2025-52436","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.4.8","matchCriteriaId":"C0B145A7-83A1-4ED2-A9DC-109CAB0AB217"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.2","matchCriteriaId":"42640C50-5490-4B50-840B-D35031671C42"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-093","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-55018","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T16:16:08.913","lastModified":"2026-06-17T09:41:07.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow  an unauthenticated attacker to smuggle an unlogged http request through the firewall policies via a specially crafted header"},{"lang":"es","value":"Una vulnerabilidad de interpretación inconsistente de solicitudes HTTP ('contrabando de solicitudes HTTP') en Fortinet FortiOS 7.6.0, FortiOS 7.4.0 hasta 7.4.9, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4.3 hasta 6.4.16 puede permitir a un atacante no autenticado contrabandear una solicitud HTTP no registrada a través de las políticas del cortafuegos mediante un encabezado especialmente diseñado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.3","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-11T14:51:48.651274Z","id":"CVE-2025-55018","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-444"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.3","versionEndIncluding":"6.4.16","matchCriteriaId":"B52F326A-281A-437B-84A4-1F443D29EC49"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.10","matchCriteriaId":"D217AE6C-1631-4E3E-95D8-7D13F299B4DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE8EE3-D64A-49C8-87D7-C18B302F864A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-667","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-975644.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-62439","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T16:16:09.080","lastModified":"2026-06-17T09:51:53.580","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de Verificación Inadecuada del Origen de un Canal de Comunicación [CWE-940] vulnerabilidad en Fortinet FortiOS 7.6.0 hasta 7.6.4, FortiOS 7.4.0 hasta 7.4.9, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones puede permitir a un usuario autenticado con conocimiento de las configuraciones de políticas FSSO obtener acceso no autorizado a recursos de red protegidos a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.1,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-11T14:57:46.535221Z","id":"CVE-2025-62439","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-940"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-384","source":"psirt@fortinet.com"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-975644.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-62676","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T16:16:09.260","lastModified":"2026-06-17T09:52:15.693","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file write with elevated permissions via crafted named pipe messages."},{"lang":"es","value":"Una resolución de enlace incorrecta antes del acceso a archivos ('Seguimiento de enlaces') vulnerabilidad [CWE-59] vulnerabilidad en Fortinet FortiClientWindows 7.4.0 hasta 7.4.4, FortiClientWindows 7.2.0 hasta 7.2.12, FortiClientWindows 7.0 todas las versiones puede permitir a un atacante local de bajos privilegios realizar una escritura de archivo arbitraria con permisos elevados a través de mensajes de tubería con nombre manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-11T04:56:21.858941Z","id":"CVE-2025-62676","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.13","matchCriteriaId":"73669967-73CD-452D-AB05-10571B917EDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"834ADFAE-08C6-4850-AC0F-ED0120A24FED"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-661","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-64157","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T16:16:09.443","lastModified":"2026-06-17T09:53:56.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0 all versions allows an authenticated admin to execute unauthorized code or commands via specifically crafted configuration."},{"lang":"es","value":"Una vulnerabilidad de uso de cadena de formato controlada externamente en Fortinet FortiOS 7.6.0 hasta 7.6.4, FortiOS 7.4.0 hasta 7.4.9, FortiOS 7.2.0 hasta 7.2.11, FortiOS 7.0 todas las versiones permite a un administrador autenticado ejecutar código o comandos no autorizados a través de una configuración específicamente diseñada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-11T04:56:19.338351Z","id":"CVE-2025-64157","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.10","matchCriteriaId":"D217AE6C-1631-4E3E-95D8-7D13F299B4DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"26DF2CCC-782C-4AE8-8CDE-13FFEE8676E6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-795","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-975644.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-68686","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T16:16:09.630","lastModified":"2026-07-28T05:17:04.113","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level."},{"lang":"es","value":"Una vulnerabilidad de Exposición de Información Sensible a un Actor No Autorizado [CWE-200] en Fortinet FortiOS 7.6.0 a 7.6.1, FortiOS 7.4.0 a 7.4.6, FortiOS 7.2 en todas las versiones, FortiOS 7.0 en todas las versiones, FortiOS 6.4 en todas las versiones puede permitir a un atacante remoto no autenticado eludir el parche desarrollado para el mecanismo de persistencia de enlaces simbólicos observado en algunos casos post-exploit, a través de solicitudes HTTP manipuladas. Un atacante necesitaría primero haber comprometido el producto a través de otra vulnerabilidad, a nivel del sistema de archivos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-27T00:00:00+00:00","id":"CVE-2025-68686","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-07-27","cisaActionDue":"2026-08-10","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.7","matchCriteriaId":"74C354FE-3415-4844-A89C-A163BC265D71"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.2","matchCriteriaId":"8563B77B-03AB-4ED2-BE70-DCF636FE0B60"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-934","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-68686","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-21743","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T16:16:10.903","lastModified":"2026-06-17T10:18:59.930","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow a read-only user to make modification to local users via a file upload to an unprotected endpoint."},{"lang":"es","value":"Una vulnerabilidad de autorización faltante en Fortinet FortiAuthenticator 6.6.0 hasta 6.6.6, FortiAuthenticator 6.5 todas las versiones, FortiAuthenticator 6.4 todas las versiones, FortiAuthenticator 6.3 todas las versiones puede permitir a un usuario de solo lectura realizar modificaciones a usuarios locales a través de una carga de archivo a un endpoint desprotegido."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.6.0","lessThanOrEqual":"6.6.6","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-10T16:26:05.549911Z","id":"CVE-2026-21743","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.3.0","versionEndExcluding":"6.6.7","matchCriteriaId":"C1683FD1-9BDE-4596-9DBC-F146922E022C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-528","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22153","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-10T16:16:11.050","lastModified":"2026-06-17T10:19:27.010","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way."},{"lang":"es","value":"Una vulnerabilidad de omisión de autenticación por debilidad primaria [CWE-305] en Fortinet FortiOS 7.6.0 hasta 7.6.4 podría permitir a un atacante no autenticado omitir la autenticación LDAP de la política de VPN sin agente o FSSO, cuando el servidor LDAP remoto está configurado de una manera específica."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-11T04:56:21.036753Z","id":"CVE-2026-22153","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-305"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"26DF2CCC-782C-4AE8-8CDE-13FFEE8676E6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-1052","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-26036","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-11T05:16:28.003","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26037","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-11T05:16:28.133","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26038","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-11T05:16:28.193","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26039","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-11T05:16:28.267","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26040","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-11T05:16:28.337","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26041","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-11T05:16:28.400","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26042","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-11T05:16:28.463","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26043","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-11T05:16:28.527","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26044","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-11T05:16:28.590","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26085","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-12T05:17:06.020","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26086","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-12T05:17:06.100","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26087","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-12T05:17:06.157","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26088","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-12T05:17:06.213","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26089","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-12T05:17:06.267","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26090","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-12T05:17:06.327","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26091","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-12T05:17:06.373","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26092","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-12T05:17:06.433","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26249","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-13T04:15:53.607","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26250","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-13T04:15:53.690","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26251","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-13T04:15:53.757","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26252","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-13T04:15:53.817","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26253","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-13T04:15:53.877","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26254","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-13T04:15:53.940","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26255","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-13T04:15:54.007","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26256","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-13T04:15:54.073","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26257","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-13T04:15:54.217","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26295","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-14T04:15:57.107","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26296","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-14T04:15:57.190","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26297","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-14T04:15:57.247","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26298","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-14T04:15:57.307","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26299","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-14T04:15:57.363","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26300","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-14T04:15:57.427","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26301","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-14T04:15:57.487","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26302","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-14T04:15:57.540","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-26303","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-14T04:15:57.600","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27031","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-18T04:16:00.680","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27032","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-18T04:16:00.780","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27033","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-18T04:16:00.853","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27034","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-18T04:16:00.920","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27035","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-18T04:16:00.983","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27036","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-18T04:16:01.057","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27037","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-18T04:16:01.127","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27038","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-18T04:16:01.193","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27317","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-20T04:15:57.880","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27318","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-20T04:15:57.990","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27319","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-20T04:15:58.063","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27320","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-20T04:15:58.123","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27321","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-20T04:15:58.187","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27322","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-20T04:15:58.253","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27323","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-20T04:15:58.320","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27324","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-20T04:15:58.383","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27325","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-20T04:15:58.450","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27527","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-21T05:17:29.683","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27528","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-21T05:17:29.790","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27529","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-21T05:17:29.850","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27530","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-21T05:17:29.910","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27531","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-21T05:17:29.967","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27532","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-21T05:17:30.023","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27533","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-21T05:17:30.087","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2026-27534","sourceIdentifier":"psirt@fortinet.com","published":"2026-02-21T05:17:30.147","lastModified":"2026-10-18T01:10:00.117","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: Not used"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2025-48418","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:17:56.793","lastModified":"2026-06-17T09:29:37.367","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.10, FortiAnalyzer Cloud 7.0.1 through 7.0.14, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.3, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.0 through 7.2.10, FortiManager 7.0.0 through 7.0.14, FortiManager 6.4 all versions, FortiManager Cloud 7.6.2 through 7.6.3, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10, FortiManager Cloud 7.0.1 through 7.0.14, FortiManager Cloud 6.4 all versions may allow a remote authenticated read-only admin with CLI access to escalate their privilege via use of a hidden command."},{"lang":"es","value":"Una vulnerabilidad de funcionalidad oculta en Fortinet FortiAnalyzer desde 7.6.0 hasta 7.6.3, FortiAnalyzer desde 7.4.0 hasta 7.4.7, FortiAnalyzer desde 7.2.0 hasta 7.2.10, FortiAnalyzer desde 7.0.0 hasta 7.0.14, FortiAnalyzer 6.4 en todas las versiones, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud desde 7.4.1 hasta 7.4.7, FortiAnalyzer Cloud desde 7.2.1 hasta 7.2.10, FortiAnalyzer Cloud desde 7.0.1 hasta 7.0.14, FortiAnalyzer Cloud 6.4 en todas las versiones, FortiManager desde 7.6.0 hasta 7.6.3, FortiManager desde 7.4.0 hasta 7.4.7, FortiManager desde 7.2.0 hasta 7.2.10, FortiManager desde 7.0.0 hasta 7.0.14, FortiManager 6.4 en todas las versiones, FortiManager Cloud desde 7.6.2 hasta 7.6.3, FortiManager Cloud desde 7.4.1 hasta 7.4.7, FortiManager Cloud desde 7.2.1 hasta 7.2.10, FortiManager Cloud desde 7.0.1 hasta 7.0.14, FortiManager Cloud 6.4 en todas las versiones podría permitir a un administrador remoto autenticado de solo lectura con acceso a la CLI escalar sus privilegios mediante el uso de un comando oculto."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-11T03:56:54.022497Z","id":"CVE-2025-48418","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-912"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.15","matchCriteriaId":"9B11229B-2427-434A-8C48-3F985AB72816"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"9E6DEDA7-2A2E-4544-8E11-8F62E73C85FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"A03D6D6F-DC59-44BA-8839-6A49DAE42BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"0EC7E465-5168-4BB8-89D3-244E6DBF70A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.0.15","matchCriteriaId":"BD321FE6-3AEC-464C-825F-E55749F49747"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.11","matchCriteriaId":"6F9EE52D-70AE-4039-960D-7F1C2B210D7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.8","matchCriteriaId":"F25FFC9B-E398-4E76-819C-0E989916D463"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.2","versionEndExcluding":"7.6.4","matchCriteriaId":"D02EAE43-43E9-4D70-A6F0-A9BED7AAB9F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.0.15","matchCriteriaId":"ED4A5B65-83BB-4C3F-964A-A1E2C57B995C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"F66A175C-52AB-4949-9082-F880BAB1693D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"C1D219F0-9035-478D-8B95-3F25C74E4AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"7E7EC074-7835-438D-8501-D7FA6A84F280"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.1","versionEndExcluding":"7.0.15","matchCriteriaId":"11B1FC39-775D-4713-9583-EEEDDD69FCEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.11","matchCriteriaId":"3F4B1FB2-2DCB-41AE-A1CD-8D2BB5108617"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndExcluding":"7.4.8","matchCriteriaId":"FD020B06-F76C-4598-BDD8-597F7D7CB4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:7.6.2:*:*:*:*:*:*:*","matchCriteriaId":"0398B368-C2ED-40BF-ADF1-7A105E242A1F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-081","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-48840","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:17:57.207","lastModified":"2026-06-17T09:30:23.770","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request."},{"lang":"es","value":"Una vulnerabilidad de omisión de autenticación por suplantación en Fortinet FortiWeb 7.6.0 hasta 7.6.3, FortiWeb 7.4.0 hasta 7.4.8, FortiWeb 7.2 todas las versiones, FortiWeb 7.0 todas las versiones puede permitir a un atacante remoto no autenticado omitir las restricciones de nombre de host a través de una solicitud especialmente diseñada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-12T14:29:49.514729Z","id":"CVE-2025-48840","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-290"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"3CF747E0-A38B-4B27-B285-11BBAF80FD3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"2B739434-1979-43F9-AEC1-D287B1BCA5CA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-097","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-49784","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:17:57.427","lastModified":"2026-06-17T09:31:55.430","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer-BigData 7.6.0, FortiAnalyzer-BigData 7.4.0 through 7.4.4, FortiAnalyzer-BigData 7.2 all versions, FortiAnalyzer-BigData 7.0 all versions, FortiAnalyzer-BigData 6.4 all versions, FortiAnalyzer-BigData 6.2 all versions may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL ('inyección SQL') en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.4, FortiAnalyzer 7.4.0 hasta 7.4.7, FortiAnalyzer 7.2 todas las versiones, FortiAnalyzer 7.0 todas las versiones, FortiAnalyzer 6.4 todas las versiones, FortiAnalyzer-BigData 7.6.0, FortiAnalyzer-BigData 7.4.0 hasta 7.4.4, FortiAnalyzer-BigData 7.2 todas las versiones, FortiAnalyzer-BigData 7.0 todas las versiones, FortiAnalyzer-BigData 6.4 todas las versiones, FortiAnalyzer-BigData 6.2 todas las versiones puede permitir a un atacante autenticado ejecutar código o comandos no autorizados a través de solicitudes específicamente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer-BigData","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T00:00:00+00:00","id":"CVE-2025-49784","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"8DE5302E-AC8C-4507-BCC8-C246B81E2636"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"00645EEE-3E67-4B98-BB49-B23AD1D60B54"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.1","versionEndExcluding":"7.4.5","matchCriteriaId":"50A8F654-BEB8-4850-B7A6-9977B37939A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_big_data:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5419206-D1B9-4D43-A5C4-F37E97D94B37"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-095","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53608","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:17:57.970","lastModified":"2026-06-17T09:38:34.580","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an authenticated privileged attacker to execute code via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') [CWE-79] vulnerabilidad en Fortinet FortiSandbox 5.0.0 hasta 5.0.2, FortiSandbox 4.4.0 hasta 4.4.7, FortiSandbox 4.2 todas las versiones, FortiSandbox 4.0 todas las versiones puede permitir a un atacante privilegiado autenticado ejecutar código a través de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.2","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.7","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-12T14:28:22.192457Z","id":"CVE-2025-53608","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.4.8","matchCriteriaId":"C0B145A7-83A1-4ED2-A9DC-109CAB0AB217"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.3","matchCriteriaId":"7A1CEA31-8309-4B13-8A3C-4830394A728D"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-091","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-54659","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:17:58.200","lastModified":"2026-06-17T09:40:29.467","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] vulnerability in Fortinet FortiSOAR Agent Communication Bridge 1.1.0, FortiSOAR Agent Communication Bridge 1.0 all versions may allow an unauthenticated attacker to read files accessible to the fortisoar user on a system where the agent is deployed, via sending a crafted request to the agent port."},{"lang":"es","value":"Una limitación inadecuada de un nombre de ruta a un directorio restringido ('Salto de ruta') vulnerabilidad [CWE-22] vulnerabilidad en Fortinet FortiSOAR Agent Communication Bridge 1.1.0, FortiSOAR Agent Communication Bridge 1.0 todas las versiones puede permitir a un atacante no autenticado leer archivos accesibles para el usuario fortisoar en un sistema donde el agente está desplegado, mediante el envío de una solicitud manipulada al puerto del agente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR Agent Communication Bridge","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoaragentcommunicationbridge:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaragentcommunicationbridge:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaragentcommunicationbridge:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaragentcommunicationbridge:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.0","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T17:30:39.455177Z","id":"CVE-2025-54659","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar_agent_communication_bridge:1.0:*:*:*:*:*:*:*","matchCriteriaId":"104D773A-17C9-4E46-B20B-8C1424352D9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar_agent_communication_bridge:1.1:*:*:*:*:*:*:*","matchCriteriaId":"40E32BE4-9970-4851-A18A-446C60F4C3D7"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-084","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-54820","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:17:58.363","lastModified":"2026-06-17T09:40:46.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is enabled. The success of the attack depends on the ability to bypass the stack protection mechanisms."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en pila [CWE-121] vulnerabilidad en Fortinet FortiManager 7.4.0 hasta 7.4.2, FortiManager 7.2.0 hasta 7.2.10, FortiManager 6.4 todas las versiones puede permitir a un atacante remoto no autenticado ejecutar comandos no autorizados a través de solicitudes manipuladas, si el servicio está habilitado. El éxito del ataque depende de la capacidad para eludir los mecanismos de protección de pila."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-12T14:46:28.306737Z","id":"CVE-2025-54820","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.11","matchCriteriaId":"8D032DF6-3C57-4EB8-8B65-CB3330FB2440"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"E4490512-36ED-4212-9D34-D74739A56E84"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-098","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-55717","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:17:58.543","lastModified":"2026-06-17T09:42:06.987","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0 all versions, FortiRecorder 6.4 all versions, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6 may allow an authenticated malicious administrator to obtain user's secrets via CLI commands. Practical exploitability is limited by conditions out of the control of the attacker: An admin must log in to the targeted device."},{"lang":"es","value":"Una vulnerabilidad de almacenamiento de información sensible en texto claro [CWE-312] vulnerabilidad en Fortinet FortiMail 7.6.0 hasta 7.6.2, FortiMail 7.4.0 hasta 7.4.4, FortiMail 7.2.0 hasta 7.2.7, FortiMail 7.0.0 hasta 7.0.8, FortiRecorder 7.2.0 hasta 7.2.3, FortiRecorder 7.0 todas las versiones, FortiRecorder 6.4 todas las versiones, FortiVoice 7.2.0, FortiVoice 7.0.0 hasta 7.0.6 puede permitir a un administrador malicioso autenticado obtener los secretos del usuario a través de comandos CLI. La explotabilidad práctica está limitada por condiciones fuera del control del atacante: Un administrador debe iniciar sesión en el dispositivo objetivo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.3","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.3,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.3,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T20:29:35.564450Z","id":"CVE-2025-55717","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"58472BB4-2426-44B5-8D17-9C984EA567EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*","matchCriteriaId":"76B48D4B-338A-4CEB-8712-6D880FF0F034"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.4","matchCriteriaId":"858BA90E-F4C0-44D3-B453-FBCAC8848BAB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.9","matchCriteriaId":"F05ACB93-42BC-43CD-845F-35FA9FE1D92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"8395970D-F937-4D1C-9FE1-90348F33FA94"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"3A40DE6A-D852-4B7E-BA67-B5DBBB3D427C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"F2F1655C-A21F-4FD3-875C-4E1DD8A7E178"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-080","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-66178","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:17:59.413","lastModified":"2026-10-21T10:16:54.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow an authenticated attacked to execute arbitrary commands via a specialy crafted HTTP request."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('inyección de comandos del sistema operativo') en Fortinet FortiWeb 8.0.0 hasta 8.0.1, FortiWeb 7.6.0 hasta 7.6.5, FortiWeb 7.4.0 hasta 7.4.11, FortiWeb 7.2.0 hasta 7.2.12, FortiWeb 7.0.0 hasta 7.0.12 puede permitir a un atacante autenticado ejecutar comandos arbitrarios mediante una solicitud HTTP especialmente diseñada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.2","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.11","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T00:00:00+00:00","id":"CVE-2025-66178","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.13","matchCriteriaId":"0AF7BC02-1316-4CD9-B82E-0A99DA91925A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.13","matchCriteriaId":"6B9458FC-3403-4125-A4A9-C15E1A4AFD29"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.12","matchCriteriaId":"00447564-4A90-4194-85FF-A8C047796A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.7","matchCriteriaId":"15C9CDE3-FE6F-4946-A3DC-FDD7A5F99D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.3","matchCriteriaId":"C82F9CC0-7683-4CDE-8370-153400605B55"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-088","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-68482","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:17:59.903","lastModified":"2026-06-17T09:59:08.467","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to view confidential information via a man in the middle [MiTM] attack."},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.4, FortiAnalyzer 7.4.0 hasta 7.4.8, FortiAnalyzer 7.2 todas las versiones, FortiAnalyzer 7.0 todas las versiones, FortiAnalyzer 6.4 todas las versiones, FortiManager 7.6.0 hasta 7.6.4, FortiManager 7.4.0 hasta 7.4.8, FortiManager 7.2 todas las versiones, FortiManager 7.0 todas las versiones, FortiManager 6.4 todas las versiones podría permitir a un atacante remoto no autenticado ver información confidencial a través de un ataque de intermediario [MitM]."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T17:31:24.845135Z","id":"CVE-2025-68482","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"BAA03593-75CE-49C0-9F26-9D7D8A60EAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"9F4A9AA3-C6AA-428B-AE1B-61F61658D642"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"C441B960-FD52-40BA-8FE1-16E3F2033554"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"00645EEE-3E67-4B98-BB49-B23AD1D60B54"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-078","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-68648","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:00.720","lastModified":"2026-06-17T09:59:22.653","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2 all versions, FortiAnalyzer Cloud 7.0 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager Cloud 7.6.2 through 7.6.3, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10, FortiManager Cloud 7.0.1 through 7.0.14 may allow an attacker to escalate its privileges via specially crafted requests."},{"lang":"es","value":"Una vulnerabilidad de uso de cadena de formato controlada externamente en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.4, FortiAnalyzer 7.4.0 hasta 7.4.7, FortiAnalyzer 7.2 todas las versiones, FortiAnalyzer 7.0 todas las versiones, FortiAnalyzer Cloud 7.6.0 hasta 7.6.4, FortiAnalyzer Cloud 7.4.0 hasta 7.4.7, FortiAnalyzer Cloud 7.2 todas las versiones, FortiAnalyzer Cloud 7.0 todas las versiones, FortiManager 7.6.0 hasta 7.6.4, FortiManager 7.4.0 hasta 7.4.7, FortiManager 7.2 todas las versiones, FortiManager 7.0 todas las versiones, FortiManager Cloud 7.6.0 hasta 7.6.4, FortiManager Cloud 7.4.0 hasta 7.4.7, FortiManager Cloud 7.2 todas las versiones, FortiManager Cloud 7.0 todas las versiones puede permitir a un atacante escalar sus privilegios a través de solicitudes especialmente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T17:32:16.848623Z","id":"CVE-2025-68648","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"038D5A52-3FF2-4340-9F26-8BB373350CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"00645EEE-3E67-4B98-BB49-B23AD1D60B54"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"3EC50E48-4E81-4087-A889-B1D2D2C8456E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"EFE9F8B4-3B5B-43FC-A286-11A5DFB43393"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"C8CAF4D2-5763-46F9-8FB4-43674B3CD8FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"9F4A9AA3-C6AA-428B-AE1B-61F61658D642"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"810BFAE5-3F80-438B-B909-B43BC95F5AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"CBA159E6-BBE9-4630-800A-5C4B3BAF23BB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-092","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22572","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:12.250","lastModified":"2026-11-06T16:17:57.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.2 through 7.2.12, FortiManager 7.6.0 through 7.6.3, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.2 through 7.2.12 may allow  an attacker with knowledge of the admins password to bypass multifactor authentication checks via submitting multiple crafted requests."},{"lang":"es","value":"Una omisión de autenticación utilizando una vulnerabilidad de ruta o canal alternativo en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.3, FortiAnalyzer 7.4.0 hasta 7.4.7, FortiAnalyzer 7.2.2 hasta 7.2.11, FortiAnalyzer Cloud 7.6.0 hasta 7.6.3, FortiAnalyzer Cloud 7.4.0 hasta 7.4.7, FortiAnalyzer Cloud 7.2.2 hasta 7.2.10, FortiManager 7.6.0 hasta 7.6.3, FortiManager 7.4.0 hasta 7.4.7, FortiManager 7.2.2 hasta 7.2.11, FortiManager Cloud 7.6.0 hasta 7.6.3, FortiManager Cloud 7.4.0 hasta 7.4.7, FortiManager Cloud 7.2.2 hasta 7.2.10 puede permitir a un atacante con conocimiento de la contraseña del administrador omitir las comprobaciones de autenticación multifactor mediante el envío de múltiples solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.2","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.2","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T00:00:00+00:00","id":"CVE-2026-22572","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.2","versionEndExcluding":"7.4.8","matchCriteriaId":"0105EF79-42B6-4891-993F-CA28F95D1764"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"7E7EC074-7835-438D-8501-D7FA6A84F280"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.2","versionEndExcluding":"7.4.8","matchCriteriaId":"F4211463-C85D-4D66-92A8-AFE961FEECAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"0EC7E465-5168-4BB8-89D3-244E6DBF70A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.2","versionEndExcluding":"7.4.8","matchCriteriaId":"B6B453F7-5AD8-4C18-9218-E8880D8D6D25"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"9AD9F018-F775-4676-AA63-454BE5996A5C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-090","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22627","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:12.570","lastModified":"2026-06-17T10:20:11.080","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet."},{"lang":"es","value":"Una vulnerabilidad de copia de búfer sin verificar el tamaño de la entrada ('desbordamiento de búfer clásico') en Fortinet FortiSwitchAXFixed 1.0.0 hasta 1.0.1 puede permitir a un atacante no autenticado dentro de la misma red adyacente ejecutar código o comandos no autorizados en el dispositivo mediante el envío de un paquete LLDP manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitchAXFixed","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchaxfixed:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchaxfixed:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","lessThanOrEqual":"1.0.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-12T14:37:35.216423Z","id":"CVE-2026-22627","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchaxfixed:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.2","matchCriteriaId":"1DE31518-C416-48C9-9B35-CA73232CDBB0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-086","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22628","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:12.720","lastModified":"2026-06-17T10:20:11.180","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado en Fortinet FortiSwitchAXFixed 1.0.0 hasta 1.0.1 puede permitir a un administrador autenticado ejecutar comandos del sistema a través de un archivo de configuración SSH específicamente diseñado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSwitchAXFixed","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchaxfixed:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchaxfixed:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.0.0","lessThanOrEqual":"1.0.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T20:28:35.428791Z","id":"CVE-2026-22628","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchaxfixed:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.2","matchCriteriaId":"1DE31518-C416-48C9-9B35-CA73232CDBB0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-085","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22629","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:12.880","lastModified":"2026-11-06T16:17:57.867","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.10, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.10, FortiAnalyzer Cloud 7.0.1 through 7.0.14, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiManager Cloud 7.6.2 through 7.6.3, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10, FortiManager Cloud 7.0.1 through 7.0.14, FortiManager Cloud 6.4 all versions may allow an attacker to bypass bruteforce protections via exploitation of race conditions. The latter raises the complexity of practical exploitation."},{"lang":"es","value":"Una vulnerabilidad de restricción inadecuada de intentos excesivos de autenticación en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.4, FortiAnalyzer 7.4 todas las versiones, FortiAnalyzer 7.2 todas las versiones, FortiAnalyzer 7.0 todas las versiones, FortiAnalyzer 6.4 todas las versiones, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 hasta 7.4.7, FortiAnalyzer Cloud 7.2.1 hasta 7.2.10, FortiAnalyzer Cloud 7.0.1 hasta 7.0.14, FortiAnalyzer Cloud 6.4 todas las versiones, FortiManager 7.6.0 hasta 7.6.4, FortiManager 7.4 todas las versiones, FortiManager 7.2 todas las versiones, FortiManager 7.0 todas las versiones, FortiManager 6.4 todas las versiones, FortiManager Cloud 7.6.2 hasta 7.6.3, FortiManager Cloud 7.4.1 hasta 7.4.7, FortiManager Cloud 7.2.1 hasta 7.2.10, FortiManager Cloud 7.0.1 hasta 7.0.14, FortiManager Cloud 6.4 todas las versiones puede permitir a un atacante eludir las protecciones de fuerza bruta mediante la explotación de condiciones de carrera. Esto último aumenta la complejidad de la explotación práctica."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T17:31:08.552013Z","id":"CVE-2026-22629","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.6.5","matchCriteriaId":"81DF30CD-E9E1-4FFC-A639-38A29B49D47D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.6.5","matchCriteriaId":"49CFD5BB-7BB4-42EC-8015-1576CC040590"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.6.5","matchCriteriaId":"A27AF3FB-4648-488C-9980-93ED0C6C3CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.6.5","matchCriteriaId":"A4F04807-CD82-4C8B-A04F-0875BE791F0B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-079","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-24017","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:17.400","lastModified":"2026-06-17T10:22:28.793","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to bypass the authentication rate-limit via crafted requests. The success of the attack depends on the attacker's resources and the password target complexity."},{"lang":"es","value":"Una vulnerabilidad de Control Inadecuado de la Frecuencia de Interacción [CWE-799] en Fortinet FortiWeb 8.0.0 hasta 8.0.2, FortiWeb 7.6.0 hasta 7.6.5, FortiWeb 7.4.0 hasta 7.4.10, FortiWeb 7.2.0 hasta 7.2.11, FortiWeb 7.0.0 hasta 7.0.11 puede permitir a un atacante remoto no autenticado eludir el límite de tasa de autenticación mediante solicitudes manipuladas. El éxito del ataque depende de los recursos del atacante y de la complejidad de la contraseña objetivo."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.2","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T00:00:00+00:00","id":"CVE-2026-24017","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-799"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.12","matchCriteriaId":"CDE13E2A-CEC3-4FC7-98AD-11CA1EAEC0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"551127B2-DCE9-403D-8073-ACD717CD0B19"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.11","matchCriteriaId":"F43B659D-6EA7-46F5-9778-0FD0FD036AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.6","matchCriteriaId":"1E5D27F6-0659-4D98-9585-FD84B433CCB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.3","matchCriteriaId":"C82F9CC0-7683-4CDE-8370-153400605B55"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-082","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-24018","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:17.560","lastModified":"2026-06-17T10:22:28.903","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged user to escalate their privileges to root."},{"lang":"es","value":"Una vulnerabilidad de seguimiento de enlaces simbólicos (Symlink) de UNIX en Fortinet FortiClientLinux 7.4.0 hasta 7.4.4, FortiClientLinux 7.2.2 hasta 7.2.12 puede permitir a un usuario local y no privilegiado escalar sus privilegios a root."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientLinux","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientlinux:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientlinux:7.2.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.2","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-11T03:56:55.161799Z","id":"CVE-2026-24018","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-61"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"7.2.2","versionEndExcluding":"7.2.13","matchCriteriaId":"C00E2D97-4175-47C4-82F0-BB30DD1B8314"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"022517B5-255A-4794-9813-2987CDBDAC43"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-083","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-24640","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:28.470","lastModified":"2026-11-06T16:18:00.360","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0.2 through 7.0.12 may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en pila [CWE-121] en Fortinet FortiWeb 8.0.0 a 8.0.2, FortiWeb 7.6.0 a 7.6.6, FortiWeb 7.4 todas las versiones, FortiWeb 7.2 todas las versiones, FortiWeb 7.0.2 a 7.0.12 puede permitir a un atacante remoto autenticado que pueda eludir la protección de pila y ASLR ejecutar código o comandos arbitrarios a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.2","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.2","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T00:00:00+00:00","id":"CVE-2026-24640","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.2","versionEndIncluding":"7.0.12","matchCriteriaId":"E41E1031-9D2C-4DE9-BA8C-9798A7F59462"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.6.7","matchCriteriaId":"6EAB60E1-9ED3-42E9-919A-06C4D94A7967"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.3","matchCriteriaId":"C82F9CC0-7683-4CDE-8370-153400605B55"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-087","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-24641","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:28.687","lastModified":"2026-11-06T16:18:00.530","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker to crash the HTTP daemon via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de desreferencia de puntero nulo [CWE-476] vulnerabilidad en Fortinet FortiWeb 8.0.0 hasta 8.0.2, FortiWeb 7.6.0 hasta 7.6.6, FortiWeb 7.4 todas las versiones, FortiWeb 7.2 todas las versiones, FortiWeb 7.0 todas las versiones puede permitir a un atacante autenticado bloquear el demonio HTTP a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.2","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-12T14:27:30.386135Z","id":"CVE-2026-24641","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.6.7","matchCriteriaId":"855290C3-8CE4-46F5-8698-25D492328FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.3","matchCriteriaId":"C82F9CC0-7683-4CDE-8370-153400605B55"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-089","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-25689","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:37.893","lastModified":"2026-11-06T16:18:00.770","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.0 all versions, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions, FortiDeceptor 4.3 all versions, FortiDeceptor 4.2 all versions, FortiDeceptor 4.1 all versions, FortiDeceptor 4.0 all versions may allow a privileged attacker with super-admin profile and CLI access to delete sensitive files via crafted HTTP requests."},{"lang":"es","value":"Una neutralización incorrecta de delimitadores de argumentos en un comando ('inyección de argumentos') vulnerabilidad en Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.0 todas las versiones, FortiDeceptor 5.3 todas las versiones, FortiDeceptor 5.2 todas las versiones, FortiDeceptor 5.1 todas las versiones, FortiDeceptor 5.0 todas las versiones, FortiDeceptor 4.3 todas las versiones, FortiDeceptor 4.2 todas las versiones, FortiDeceptor 4.1 todas las versiones, FortiDeceptor 4.0 todas las versiones puede permitir a un atacante privilegiado con perfil de superadministrador y acceso CLI eliminar archivos sensibles a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDeceptor","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortideceptor:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:4.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.4","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.4","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.2","versionType":"semver","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"},{"version":"4.3.0","status":"affected"},{"version":"4.2.0","status":"affected"},{"version":"4.1.0","lessThanOrEqual":"4.1.1","versionType":"semver","status":"affected"},{"version":"4.0.0","lessThanOrEqual":"4.0.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T17:32:37.881287Z","id":"CVE-2026-25689","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"6.0.3","matchCriteriaId":"8C4C32A5-DB90-425A-8036-07C22BD41135"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B068BDA7-5FA0-48AF-9AD1-6E5DCBBBDA66"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-094","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-25836","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:38.090","lastModified":"2026-06-17T10:25:18.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow  a privileged attacker with super-admin profile and CLI access to execute unauthorized code or commands via crafted HTTP requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo (vulnerabilidad de 'inyección de comandos' del SO) en Fortinet FortiSandbox Cloud 5.0.4 puede permitir a un atacante privilegiado con perfil de superadministrador y acceso a la CLI ejecutar código o comandos no autorizados a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxcloud:5.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.4","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:5.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T00:00:00+00:00","id":"CVE-2026-25836","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E5E86B19-95E8-4107-85DC-EFE47225418C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-096","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-25972","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:38.323","lastModified":"2026-06-17T10:25:32.280","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4 may allow a remote unauthenticated attacker to provide arbitrary data enabling a social engineering attack via spoofed URL parameters."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web ('cross-site scripting') en Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 hasta 7.3.4 puede permitir a un atacante remoto no autenticado proporcionar datos arbitrarios, lo que permite un ataque de ingeniería social a través de parámetros de URL falsificados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-12T14:27:55.325451Z","id":"CVE-2026-25972","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.5","matchCriteriaId":"C41BBF42-F97A-4358-ADB6-9762BD8F3CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"500DAB25-48C9-48C7-B7CD-92C06989F039"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-077","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-30897","sourceIdentifier":"psirt@fortinet.com","published":"2026-03-10T18:18:51.227","lastModified":"2026-11-06T16:18:01.777","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en pila en Fortinet FortiWeb 8.0.0 hasta 8.0.3, FortiWeb 7.6.0 hasta 7.6.6, FortiWeb 7.4.0 hasta 7.4.11, FortiWeb 7.2 todas las versiones, FortiWeb 7.0 todas las versiones puede permitir a un atacante remoto autenticado que puede eludir la protección de pila y ASLR ejecutar código o comandos arbitrarios mediante solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.3","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.11","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-10T00:00:00+00:00","id":"CVE-2026-30897","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.12","matchCriteriaId":"315AEB16-B28E-4D45-B4A8-0D4CAB31F6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.7","matchCriteriaId":"15C9CDE3-FE6F-4946-A3DC-FDD7A5F99D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.4","matchCriteriaId":"9C922491-BA4C-48DF-8697-8FE742FDA39B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-093","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-35616","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-04T01:16:39.720","lastModified":"2026-07-24T21:10:00.143","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado en Fortinet FortiClientEMS 7.4.5 hasta 7.4.6 puede permitir a un atacante no autenticado ejecutar código o comandos no autorizados mediante solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.5","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-03T00:00:00+00:00","id":"CVE-2026-35616","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-04-06","cisaActionDue":"2026-04-09","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Fortinet FortiClient EMS Improper Access Control Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"7CFAA44F-6B24-4702-93B8-94B703D684D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:*","matchCriteriaId":"4AA9A954-1D6F-4B4D-9670-1DCF14F59737"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-099","source":"psirt@fortinet.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-35616","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2024-23104","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:28.723","lastModified":"2026-11-08T20:10:00.187","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiVoice 7.0.0 through 7.0.1 may allow a remote authenticated attacker with at least read-only permission on system maintenance to access backup information via crafted HTTP requests"},{"lang":"es","value":"Una vulnerabilidad de exposición de información sensible a un actor no autorizado en Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 hasta 7.4.8, FortiNDR 7.2 todas las versiones, FortiNDR 7.1 todas las versiones, FortiNDR 7.0 todas las versiones, FortiVoice 7.0.0 hasta 7.0.1 puede permitir a un atacante remoto autenticado con al menos permiso de solo lectura en el mantenimiento del sistema acceder a información de respaldo a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortindr:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:25:58.464987Z","id":"CVE-2024-23104","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.2","matchCriteriaId":"5F6B6495-7CF4-4E5A-8497-9AF6D81C083B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"63871F8B-0798-4615-9781-9C7FA68C30AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:7.6.0:*:*:*:*:*:*:*","matchCriteriaId":"9A1D8AE9-D9F9-402C-B8EB-58189200E0D6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-124","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53847","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:30.890","lastModified":"2026-10-07T09:10:00.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiOS 6.2.9 through 6.2.17 allows attacker to execute unauthorized code or commands via specially crafted packets."},{"lang":"es","value":"Una vulnerabilidad de autenticación faltante para función crítica en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4.0 hasta 7.4.8, FortiOS 7.2.0 hasta 7.2.11, FortiOS 7.0.0 hasta 7.0.17, FortiOS 6.4 todas las versiones, FortiOS 6.2.9 hasta 6.2.17 permite al atacante ejecutar código o comandos no autorizados a través de paquetes especialmente diseñados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.9","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:33:19.912953Z","id":"CVE-2025-53847","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.9","versionEndExcluding":"7.0.18","matchCriteriaId":"28134B51-B94F-4BC7-A741-D9FE74C82FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"E8FAAA2E-7A53-4F6B-A9C7-1E2B4CB5F7EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"2093EFE3-4B7F-4806-9850-C42B26BC64AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-125","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-975644.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-59809","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:31.103","lastModified":"2026-10-14T13:10:00.187","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.4, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated attacker to discover services running on local ports via crafted requests."},{"lang":"es","value":"Una falsificación de petición del lado del servidor (SSRF) vulnerabilidad [CWE-918] vulnerabilidad en Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 a 7.6.2, FortiSOAR PaaS 7.5.0 a 7.5.2, FortiSOAR PaaS 7.4 todas las versiones, FortiSOAR PaaS 7.3 todas las versiones, FortiSOAR on-premise 7.6.4, FortiSOAR on-premise 7.6.0 a 7.6.2, FortiSOAR on-premise 7.5.0 a 7.5.2, FortiSOAR on-premise 7.4 todas las versiones, FortiSOAR on-premise 7.3 todas las versiones puede permitir a un atacante autenticado descubrir servicios ejecutándose en puertos locales a través de peticiones manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoaron-premise:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.4","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.4","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:34:45.731183Z","id":"CVE-2025-59809","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.5.3","matchCriteriaId":"CD42D7DF-B095-44E1-B7E1-D203678DF740"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"9F88A820-7AAA-49BB-87AB-E93693B9889F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:7.6.4:*:*:*:*:*:*:*","matchCriteriaId":"18CF14F5-B330-4125-98FA-C3A0F042358F"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-103","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-61624","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:31.300","lastModified":"2026-10-17T04:16:43.363","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands."},{"lang":"es","value":"Una limitación inadecuada de un nombre de ruta a un directorio restringido ('salto de ruta') [CWE-22] vulnerabilidad en Fortinet FortiOS 7.6.0 a 7.6.4, FortiOS 7.4.0 a 7.4.9, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones, FortiPAM 1.7.0, FortiPAM 1.6 todas las versiones, FortiPAM 1.5 todas las versiones, FortiPAM 1.4 todas las versiones, FortiPAM 1.3 todas las versiones, FortiPAM 1.2 todas las versiones, FortiPAM 1.1 todas las versiones, FortiPAM 1.0 todas las versiones, FortiProxy 7.6.0 a 7.6.4, FortiProxy 7.4.0 a 7.4.11, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones, FortiSwitchManager 7.2.0 a 7.2.7, FortiSwitchManager 7.0.0 a 7.0.6 puede permitir a un atacante autenticado con perfil de administrador y al menos permisos de lectura-escritura escribir o eliminar archivos arbitrarios a través de comandos CLI específicos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.11","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.7.0","status":"affected"},{"version":"1.6.0","lessThanOrEqual":"1.6.2","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-15T00:00:00+00:00","id":"CVE-2025-61624","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-10-16","cisaActionDue":"2026-10-19","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Fortinet Multiple Products Path Traversal Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.10","matchCriteriaId":"8E0DD361-4041-480A-8B5E-1E14BBDD8133"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"26DF2CCC-782C-4AE8-8CDE-13FFEE8676E6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.7.1","matchCriteriaId":"C8E26F28-B9CA-47D5-86B0-AA98C67D9314"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.12","matchCriteriaId":"92465F3D-698E-4CA6-87CB-E5A08C34067E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"026DF873-FF5C-4629-8516-350C53CE2DEA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.7","matchCriteriaId":"23564E7E-21B7-4936-B4F2-85CD46D64A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.8","matchCriteriaId":"6EFEB80D-87BB-4AD3-AA9D-9F0C37F227D2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"37FDCA69-9049-40B4-88AF-F476901022B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*","matchCriteriaId":"B89A6863-B602-4404-8D26-337FECABFFF0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-122","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-975644.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"]},{"url":"https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2025-61848","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:31.610","lastModified":"2026-10-14T13:10:00.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.3, FortiAnalyzer-BigData 7.6.0 through 7.6.1, FortiAnalyzer-BigData 7.4.0 through 7.4.5, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager Cloud 7.6.2 through 7.6.4 may allow a privileged authenticated attacker to execute unauthorized code or commands via JSON RPC API"},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando SQL ('inyección SQL') en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.4, FortiAnalyzer 7.4.0 hasta 7.4.8, FortiAnalyzer 7.2 todas las versiones, FortiAnalyzer 7.0 todas las versiones, FortiAnalyzer Cloud 7.6.0 hasta 7.6.4, FortiAnalyzer Cloud 7.4.0 hasta 7.4.8, FortiAnalyzer Cloud 7.2 todas las versiones, FortiAnalyzer Cloud 7.0 todas las versiones, FortiManager 7.6.0 hasta 7.6.4, FortiManager 7.4.0 hasta 7.4.8, FortiManager 7.2 todas las versiones, FortiManager 7.0 todas las versiones, FortiManager Cloud 7.6.0 hasta 7.6.4, FortiManager Cloud 7.4.0 hasta 7.4.8, FortiManager Cloud 7.2 todas las versiones, FortiManager Cloud 7.0 todas las versiones puede permitir a un atacante autenticado privilegiado ejecutar código o comandos no autorizados a través de la API JSON RPC."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer-BigData","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T00:00:00+00:00","id":"CVE-2025-61848","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"FB8E4D80-6F2B-476C-AC28-981416A6C26D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"00645EEE-3E67-4B98-BB49-B23AD1D60B54"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"927AF131-67C2-4DA4-9171-7C5CCA52C7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"EFE9F8B4-3B5B-43FC-A286-11A5DFB43393"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"522F42DB-51DC-4FF2-ADA1-AB3129E939CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"9F4A9AA3-C6AA-428B-AE1B-61F61658D642"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.9","matchCriteriaId":"3EE58778-BB43-439E-887B-F6E401A2B67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"CBA159E6-BBE9-4630-800A-5C4B3BAF23BB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-111","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-61886","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:31.800","lastModified":"2026-10-14T13:10:00.187","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox PaaS 5.0.0 through 5.0.4 may allow an attacker to perform an XSS attack via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de Neutralización Incorrecta de Entrada Durante la Generación de Páginas Web ('cross-site scripting') [CWE-79] vulnerabilidad en Fortinet FortiSandbox 5.0.0 hasta 5.0.4, FortiSandbox PaaS 5.0.0 hasta 5.0.4 puede permitir a un atacante realizar un ataque XSS a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:24:45.323517Z","id":"CVE-2025-61886","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.5","matchCriteriaId":"EF408E96-79E8-452F-87E5-2E8CA083785E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E5E86B19-95E8-4107-85DC-EFE47225418C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-109","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-68649","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:34.760","lastModified":"2026-10-14T13:10:00.187","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.0 through 7.6.4, FortiAnalyzer Cloud 7.4.0 through 7.4.7, FortiAnalyzer Cloud 7.2 all versions, FortiAnalyzer Cloud 7.0 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager Cloud 7.6.0 through 7.6.4, FortiManager Cloud 7.4.0 through 7.4.7, FortiManager Cloud 7.2 all versions, FortiManager Cloud 7.0 all versions may allow a privileged attacker to delete files from the underlying filesystem via crafted CLI requests."},{"lang":"es","value":"Una limitación inadecuada de un nombre de ruta a un directorio restringido ('salto de ruta') vulnerabilidad en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.4, FortiAnalyzer 7.4.0 hasta 7.4.7, FortiAnalyzer 7.2 todas las versiones, FortiAnalyzer 7.0 todas las versiones, FortiAnalyzer Cloud 7.6.0 hasta 7.6.4, FortiAnalyzer Cloud 7.4.0 hasta 7.4.7, FortiAnalyzer Cloud 7.2 todas las versiones, FortiAnalyzer Cloud 7.0 todas las versiones, FortiManager 7.6.0 hasta 7.6.4, FortiManager 7.4.0 hasta 7.4.7, FortiManager 7.2 todas las versiones, FortiManager 7.0 todas las versiones, FortiManager Cloud 7.6.0 hasta 7.6.4, FortiManager Cloud 7.4.0 hasta 7.4.7, FortiManager Cloud 7.2 todas las versiones, FortiManager Cloud 7.0 todas las versiones puede permitir a un atacante privilegiado eliminar archivos del sistema de archivos subyacente a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:16:05.364770Z","id":"CVE-2025-68649","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"810BFAE5-3F80-438B-B909-B43BC95F5AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"CBA159E6-BBE9-4630-800A-5C4B3BAF23BB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"C8CAF4D2-5763-46F9-8FB4-43674B3CD8FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"9F4A9AA3-C6AA-428B-AE1B-61F61658D642"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"3EC50E48-4E81-4087-A889-B1D2D2C8456E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"EFE9F8B4-3B5B-43FC-A286-11A5DFB43393"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.8","matchCriteriaId":"038D5A52-3FF2-4340-9F26-8BB373350CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"00645EEE-3E67-4B98-BB49-B23AD1D60B54"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-120","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-21741","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:35.777","lastModified":"2026-11-06T16:17:56.173","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 all versions may allow a remote privileged attacker with system administrator role to redirect users to an arbitrary website via crafted CSV file."},{"lang":"es","value":"Una vulnerabilidad de redirección de URL a sitio no confiable (’Redirección abierta’) [CWE-601] en Fortinet FortiNAC-F 7.6.0 hasta 7.6.5, FortiNAC-F 7.4 en todas sus versiones, FortiNAC-F 7.2 en todas sus versiones puede permitir a un atacante remoto privilegiado con rol de administrador de sistema redirigir a los usuarios a un sitio web arbitrario a través de un archivo CSV manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNAC-F","defaultStatus":"unaffected","versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N","baseScore":2.4,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:15:45.406424Z","id":"CVE-2026-21741","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortinac-f:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.6.6","matchCriteriaId":"0BCEDC2F-CD76-475E-A6E9-06DE826AF71B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-118","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-21742","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:35.930","lastModified":"2026-10-26T22:10:00.163","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated attacker to view cleartext password in response for Secure Message Exchange and Radius queries, if configured"},{"lang":"es","value":"Una vulnerabilidad de transmisión en texto claro de información sensible en Fortinet FortiSOAR PaaS 7.6.0 hasta 7.6.3, FortiSOAR PaaS 7.5.0 hasta 7.5.2, FortiSOAR PaaS 7.4 todas las versiones, FortiSOAR PaaS 7.3 todas las versiones, FortiSOAR on-premise 7.6.0 hasta 7.6.2, FortiSOAR on-premise 7.5.0 hasta 7.5.1, FortiSOAR on-premise 7.4 todas las versiones, FortiSOAR on-premise 7.3 todas las versiones puede permitir a un atacante autenticado ver la contraseña en texto claro en respuesta a consultas de Secure Message Exchange y Radius, si está configurado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoaron-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","baseScore":5.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:35:12.570489Z","id":"CVE-2026-21742","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.5.3","matchCriteriaId":"CD42D7DF-B095-44E1-B7E1-D203678DF740"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"6E11F916-A349-4C7F-8F39-2A3C9F2FB006"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-106","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22154","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:36.077","lastModified":"2026-11-06T16:17:56.807","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform a stored cross site scripting (XSS) attack via crafted HTTP Requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de la entrada durante la generación de páginas web (’cross-site scripting’) en Fortinet FortiSOAR PaaS 7.6.0 a 7.6.3, FortiSOAR PaaS 7.5.0 a 7.5.2, FortiSOAR PaaS 7.4 todas las versiones, FortiSOAR PaaS 7.3 todas las versiones, FortiSOAR on-premise 7.6.0 a 7.6.3, FortiSOAR on-premise 7.5.0 a 7.5.2, FortiSOAR on-premise 7.4 todas las versiones, FortiSOAR on-premise 7.3 todas las versiones puede permitir a un atacante remoto autenticado realizar un ataque de cross-site scripting (XSS) almacenado a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:35:48.704992Z","id":"CVE-2026-22154","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.5.3","matchCriteriaId":"CD42D7DF-B095-44E1-B7E1-D203678DF740"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"6E11F916-A349-4C7F-8F39-2A3C9F2FB006"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-117","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22155","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:36.267","lastModified":"2026-10-26T21:10:00.170","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow attacker to information disclosure via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de transmisión en texto claro de información sensible en Fortinet FortiSOAR PaaS 7.6.0 hasta 7.6.3, FortiSOAR PaaS 7.5.0 hasta 7.5.2, FortiSOAR PaaS 7.4 todas las versiones, FortiSOAR PaaS 7.3 todas las versiones, FortiSOAR en las instalaciones 7.6.0 hasta 7.6.2, FortiSOAR en las instalaciones 7.5.0 hasta 7.5.1, FortiSOAR en las instalaciones 7.4 todas las versiones, FortiSOAR en las instalaciones 7.3 todas las versiones podría permitir al atacante la revelación de información a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoaron-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:34:58.769731Z","id":"CVE-2026-22155","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.5.3","matchCriteriaId":"CD42D7DF-B095-44E1-B7E1-D203678DF740"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"6E11F916-A349-4C7F-8F39-2A3C9F2FB006"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-106","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22573","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:36.550","lastModified":"2026-11-06T16:17:57.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to perform path traversal attack via File Content Extraction actions."},{"lang":"es","value":"Una vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido (’salto de ruta’) en Fortinet FortiSOAR PaaS 7.6.0 hasta 7.6.3, FortiSOAR PaaS 7.5 todas las versiones, FortiSOAR PaaS 7.4 todas las versiones, FortiSOAR PaaS 7.3 todas las versiones, FortiSOAR on-premise 7.6.0 hasta 7.6.3, FortiSOAR on-premise 7.5 todas las versiones, FortiSOAR on-premise 7.4 todas las versiones, FortiSOAR on-premise 7.3 todas las versiones puede permitir a un atacante remoto autenticado realizar un ataque de salto de ruta a través de acciones de Extracción de Contenido de Archivos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:24:34.309578Z","id":"CVE-2026-22573","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndIncluding":"7.3.3","matchCriteriaId":"030CE7E8-05B5-4AE0-AD59-5D07150DEF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.5","matchCriteriaId":"46AD20C7-44D4-4DDE-B74A-BEB8B3890277"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.5.0","versionEndIncluding":"7.5.3","matchCriteriaId":"86B32392-F2E0-49FE-988A-02CC6D257DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.3","matchCriteriaId":"DEB8A1CE-2EB8-43B7-9E9A-0106BF54631E"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-116","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22574","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:36.760","lastModified":"2026-10-26T22:10:00.163","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve Service account password via server address modification in LDAP configuration."},{"lang":"es","value":"Una vulnerabilidad de almacenamiento de contraseñas en formato recuperable en Fortinet FortiSOAR PaaS 7.6.0 hasta 7.6.4, FortiSOAR PaaS 7.5.0 hasta 7.5.2, FortiSOAR PaaS 7.4 todas las versiones, FortiSOAR PaaS 7.3 todas las versiones, FortiSOAR local 7.6.0 hasta 7.6.4, FortiSOAR local 7.5.0 hasta 7.5.2, FortiSOAR local 7.4 todas las versiones, FortiSOAR local 7.3 todas las versiones puede permitir a un atacante remoto autenticado recuperar la contraseña de la cuenta de servicio mediante la modificación de la dirección del servidor en la configuración LDAP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoaron-premise:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N","baseScore":4.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:35:22.098427Z","id":"CVE-2026-22574","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-257"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.5.3","matchCriteriaId":"CD42D7DF-B095-44E1-B7E1-D203678DF740"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"B8E1DFBC-0D1B-419C-89A5-D2A59B7485F6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-105","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22576","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:36.937","lastModified":"2026-11-06T16:17:57.537","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve passwords for multiple installed connectors via server address modification in connector configuration."},{"lang":"es","value":"Una vulnerabilidad de almacenamiento de contraseñas en formato recuperable en Fortinet FortiSOAR PaaS 7.6.0 hasta 7.6.4, FortiSOAR PaaS 7.5.0 hasta 7.5.2, FortiSOAR PaaS 7.4 todas las versiones, FortiSOAR PaaS 7.3 todas las versiones, FortiSOAR local 7.6.0 hasta 7.6.4, FortiSOAR local 7.5.0 hasta 7.5.2, FortiSOAR local 7.4 todas las versiones, FortiSOAR local 7.3 todas las versiones puede permitir a un atacante remoto autenticado recuperar contraseñas para múltiples conectores instalados a través de la modificación de la dirección del servidor en la configuración del conector."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:29:52.411885Z","id":"CVE-2026-22576","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-257"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.5.3","matchCriteriaId":"CD42D7DF-B095-44E1-B7E1-D203678DF740"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"B8E1DFBC-0D1B-419C-89A5-D2A59B7485F6"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-104","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-22828","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:37.110","lastModified":"2026-10-26T22:10:00.163","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. Successful exploitation would require a large amount of effort in preparation because of ASLR and network segmentation"},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en montículo en Fortinet FortiAnalyzer Cloud 7.6.2 hasta 7.6.4, FortiManager Cloud 7.6.2 hasta 7.6.4 podría permitir a un atacante remoto no autenticado ejecutar código o comandos arbitrarios a través de solicitudes específicamente diseñadas. La explotación exitosa requeriría una gran cantidad de esfuerzo en la preparación debido a ASLR y la segmentación de red."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T00:00:00+00:00","id":"CVE-2026-22828","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.2","versionEndExcluding":"7.6.5","matchCriteriaId":"DD316E76-BA1D-49B1-87D8-2F34BA65CD0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.2","versionEndExcluding":"7.6.5","matchCriteriaId":"68A18EB0-B6E2-4419-A476-125BFB1A80C1"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-121","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-23708","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:37.277","lastModified":"2026-11-06T16:17:58.180","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authentication via replaying captured 2FA request. The attack requires being able to intercept and decrypt authentication traffic and precise timing to replay the request before token expiration, which raises the attack complexity."},{"lang":"es","value":"Una vulnerabilidad de autenticación impropia en Fortinet FortiSOAR PaaS 7.6.0 hasta 7.6.3, FortiSOAR PaaS 7.5.0 hasta 7.5.2, FortiSOAR local 7.6.0 hasta 7.6.3, FortiSOAR local 7.5.0 hasta 7.5.2 puede permitir a un atacante no autenticado eludir la autenticación mediante la repetición de una solicitud 2FA capturada. El ataque requiere poder interceptar y descifrar el tráfico de autenticación y una sincronización precisa para repetir la solicitud antes de la expiración del token, lo que aumenta la complejidad del ataque."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoar_on-premise:7.5.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T00:00:00+00:00","id":"CVE-2026-23708","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.5.0","versionEndExcluding":"7.5.3","matchCriteriaId":"43966D08-F9B9-4CCA-BE32-649C1F08B905"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"6E11F916-A349-4C7F-8F39-2A3C9F2FB006"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-101","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-25691","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:37.623","lastModified":"2026-10-26T22:10:00.163","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 may allow a privileged attacker with super-admin profile and CLI access to delete an arbitrary directory via HTTP crafted requests."},{"lang":"es","value":"Una vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido (’salto de ruta’) en Fortinet FortiSandbox 5.0.0 hasta 5.0.5, FortiSandbox 4.4.0 hasta 4.4.8, FortiSandbox 4.2 todas las versiones, FortiSandbox Cloud 5.0.4, FortiSandbox PaaS 5.0.4 puede permitir a un atacante privilegiado con perfil de superadministrador y acceso CLI eliminar un directorio arbitrario a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:5.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.4","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxcloud:5.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.4","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:34:33.306644Z","id":"CVE-2026-25691","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.4.9","matchCriteriaId":"B8AB5361-2D05-4368-95CC-20BFED00AEB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.6","matchCriteriaId":"3AAEF316-2134-4398-911C-E7532CD3AFF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E5E86B19-95E8-4107-85DC-EFE47225418C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-115","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-27316","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:37.863","lastModified":"2026-11-06T16:18:01.357","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 23.4 all versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all versions, FortiSandbox PaaS 22.2 all versions, FortiSandbox PaaS 22.1 all versions, FortiSandbox PaaS 21.4 all versions, FortiSandbox PaaS 21.3 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5 may allow an authenticathed administrator to read LDAP server credentials via client-side inspection."},{"lang":"es","value":"Una vulnerabilidad de credenciales insuficientemente protegidas en Fortinet FortiSandbox 5.0.0 a 5.0.5, FortiSandbox 4.4 en todas sus versiones, FortiSandbox PaaS 5.0.1 a 5.0.5 puede permitir a un administrador autenticado leer las credenciales del servidor LDAP a través de la inspección del lado del cliente."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:23.4.4374:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:23.4.4350:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:23.3.4329:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:23.1.4245:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:22.2.4151:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:22.2.4134:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:22.1.4113:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:21.4.4072:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:21.3.4055:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.1:*:*:*:*:*:*:*"],"versions":[{"version":"23.4.4374","status":"affected"},{"version":"23.4.4350","status":"affected"},{"version":"23.3.4329","status":"affected"},{"version":"23.1.4245","status":"affected"},{"version":"22.2.4151","status":"affected"},{"version":"22.2.4134","status":"affected"},{"version":"22.1.4113","status":"affected"},{"version":"21.4.4072","status":"affected"},{"version":"21.3.4055","status":"affected"},{"version":"5.0.1","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:29:34.942295Z","id":"CVE-2026-27316","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"5.0.6","matchCriteriaId":"69DCB6D2-21D3-4EE8-9A81-5DA8292EFB28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E5E86B19-95E8-4107-85DC-EFE47225418C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FDAB696D-20A1-4C1A-8DD6-FDECD560AC9C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-113","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-39808","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:44.860","lastModified":"2026-10-26T21:10:00.170","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo (’inyección de comandos del sistema operativo’) en Fortinet FortiSandbox 4.4.0 hasta 4.4.8 puede permitir al atacante ejecutar código o comandos no autorizados a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"4.4.0","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:23.4.4374:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:23.4.4350:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:23.3.4329:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:23.1.4245:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:22.2.4151:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:22.2.4134:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:22.1.4113:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:21.4.4072:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:21.3.4055:*:*:*:*:*:*:*"],"versions":[{"version":"23.4.4374","status":"affected"},{"version":"23.4.4350","status":"affected"},{"version":"23.3.4329","status":"affected"},{"version":"23.1.4245","status":"affected"},{"version":"22.2.4151","status":"affected"},{"version":"22.2.4134","status":"affected"},{"version":"22.1.4113","status":"affected"},{"version":"21.4.4072","status":"affected"},{"version":"21.3.4055","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T00:00:00+00:00","id":"CVE-2026-39808","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-07-16","cisaActionDue":"2026-07-19","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Fortinet FortiSandbox OS Command Injection Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndIncluding":"4.4.9","matchCriteriaId":"94FFE14D-51FF-4D31-A0FD-5B0877081A04"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-100","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://github.com/samu-delucas/CVE-2026-39808","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-39808","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-39809","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:45.017","lastModified":"2026-11-06T16:18:15.367","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.4, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2.12, FortiClientEMS 7.2.0 through 7.2.10 may allow attacker to execute unauthorized code or commands via sending crafted requests"},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL (’inyección SQL’) en Fortinet FortiClientEMS 7.4.0 hasta 7.4.5, FortiClientEMS 7.2.0 hasta 7.2.12, FortiClientEMS 7.0 todas las versiones podría permitir al atacante ejecutar código o comandos no autorizados mediante el envío de solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.3","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.12","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T00:00:00+00:00","id":"CVE-2026-39809","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.13","matchCriteriaId":"91D4223F-37D4-45D7-A767-2AA8EDAC9AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.13","matchCriteriaId":"6829FECD-54D2-42D1-B2F8-B34B3913FC51"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"7FF067FF-526C-4399-8220-E2978445F005"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-102","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-39810","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:45.173","lastModified":"2026-11-06T16:18:15.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1 may allow attacker to information disclosure via decrypting database dump."},{"lang":"es","value":"Una vulnerabilidad de uso de clave criptográfica codificada de forma rígida en Fortinet FortiClientEMS 7.4.0 hasta 7.4.5 podría permitir al atacante la revelación de información mediante el descifrado de un volcado de la base de datos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.3","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:25:24.721264Z","id":"CVE-2026-39810","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"7FF067FF-526C-4399-8220-E2978445F005"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-107","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-39811","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:45.310","lastModified":"2026-10-26T21:10:00.170","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to denial of service via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de entero o desbordamiento cíclico en Fortinet FortiWeb 8.0.0 hasta 8.0.3, FortiWeb 7.6.0 hasta 7.6.6, FortiWeb 7.4 todas las versiones, FortiWeb 7.2 todas las versiones, FortiWeb 7.0 todas las versiones puede permitir al atacante realizar una denegación de servicio a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.3","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.12","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:25:41.160205Z","id":"CVE-2026-39811","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.13","matchCriteriaId":"1616A048-AEA1-4340-B208-9DECD688C5E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.13","matchCriteriaId":"DCAF1C24-6077-4396-A5C8-90C96C795D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.12","matchCriteriaId":"C68859A1-DA8E-4363-A174-0D53BD0B5625"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.7","matchCriteriaId":"15C9CDE3-FE6F-4946-A3DC-FDD7A5F99D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.4","matchCriteriaId":"9C922491-BA4C-48DF-8697-8FE742FDA39B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-108","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-39812","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:45.490","lastModified":"2026-10-26T22:10:00.163","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.5, FortiSandbox PaaS 4.4.0 through 4.4.8, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de la entrada durante la generación de páginas web (’cross-site scripting’) en Fortinet FortiSandbox 5.0.0 hasta 5.0.5, FortiSandbox 4.4.0 hasta 4.4.8, FortiSandbox 4.2 en todas las versiones, FortiSandbox PaaS 5.0.0 hasta 5.0.5, FortiSandbox PaaS 4.4.0 hasta 4.4.8, FortiSandbox PaaS 4.2 en todas las versiones puede permitir al atacante ejecutar código o comandos no autorizados a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.4","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:26:08.654637Z","id":"CVE-2026-39812","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.8","matchCriteriaId":"814D77BE-F536-42DE-B068-F92B95D68248"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.9","matchCriteriaId":"0025C9C0-8D61-4563-96F9-F4E09DD83B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.6","matchCriteriaId":"3AAEF316-2134-4398-911C-E7532CD3AFF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"22.2.4134","versionEndIncluding":"23.1.4260","matchCriteriaId":"4ADBF898-6FFB-4DBF-AF54-67D431353496"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"23.3.4329","versionEndIncluding":"24.1.4436","matchCriteriaId":"C1D4D476-ECDB-453B-B69C-E9CD894B4FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E5E86B19-95E8-4107-85DC-EFE47225418C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FDAB696D-20A1-4C1A-8DD6-FDECD560AC9C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-110","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-39813","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:45.680","lastModified":"2026-11-06T16:18:15.760","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta: ’.. / filedir’ en Fortinet FortiSandbox 5.0.0 hasta 5.0.5, FortiSandbox 4.4.0 hasta 4.4.8 puede permitir al atacante la escalada de privilegios a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T00:00:00+00:00","id":"CVE-2026-39813","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-24"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.9","matchCriteriaId":"0025C9C0-8D61-4563-96F9-F4E09DD83B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.6","matchCriteriaId":"3AAEF316-2134-4398-911C-E7532CD3AFF2"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-112","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-39814","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:45.850","lastModified":"2026-10-29T17:18:09.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.13, FortiWeb 7.2.7 through 7.2.13, FortiWeb 7.0.10 through 7.0.12 may allow a local privileged attacker to execute unauthorized code on the underlying system via crafted CLI commands."},{"lang":"es","value":"Una vulnerabilidad de salto de ruta relativo en Fortinet FortiWeb 8.0.0 hasta 8.0.2, FortiWeb 7.6.0 hasta 7.6.6, FortiWeb 7.4.1 hasta 7.4.12, FortiWeb 7.2.7 hasta 7.2.12, FortiWeb 7.0.10 hasta 7.0.12 podría permitir a un atacante ejecutar código o comandos no autorizados a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.2","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.7","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.10","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T00:00:00+00:00","id":"CVE-2026-39814","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-23"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.10","versionEndIncluding":"7.0.12","matchCriteriaId":"788989BE-8E1C-4D12-A7B6-DE308981347C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.12","matchCriteriaId":"1DECC3AF-4D0E-4E4B-A9C8-00EE909A9C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.1","versionEndIncluding":"7.4.12","matchCriteriaId":"B4AA9D45-4F5C-4668-B97D-7A2B8185F73E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.7","matchCriteriaId":"15C9CDE3-FE6F-4946-A3DC-FDD7A5F99D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.3","matchCriteriaId":"C82F9CC0-7683-4CDE-8370-153400605B55"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-114","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-39815","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T16:16:46.383","lastModified":"2026-10-26T21:10:00.170","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7.2.2 may allow attacker to execute unauthorized code or commands via sending crafted HTTP requests"},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de elementos especiales utilizados en un comando SQL (’inyección SQL’) en Fortinet FortiDDoS-F 7.2.1 a 7.2.2 puede permitir al atacante ejecutar código o comandos no autorizados mediante el envío de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDDoS-F","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortiddos-f:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortiddos-f:7.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.1","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-14T16:22:55.316897Z","id":"CVE-2026-39815","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.1","versionEndExcluding":"7.2.3","matchCriteriaId":"D689EF4D-14F7-4D42-8814-2A44EE85C304"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-119","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-40688","sourceIdentifier":"psirt@fortinet.com","published":"2026-04-14T23:16:29.633","lastModified":"2026-07-24T21:10:00.143","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attacker to execute arbitrary code or command via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de escritura fuera de límites en Fortinet FortiWeb 8.0.0 hasta 8.0.3, FortiWeb 7.6.0 hasta 7.6.6, FortiWeb 7.4.0 hasta 7.4.11 podría permitir al atacante ejecutar código o comandos no autorizados a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.3","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-15T00:00:00+00:00","id":"CVE-2026-40688","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.12","matchCriteriaId":"00447564-4A90-4194-85FF-A8C047796A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.7","matchCriteriaId":"15C9CDE3-FE6F-4946-A3DC-FDD7A5F99D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.4","matchCriteriaId":"9C922491-BA4C-48DF-8697-8FE742FDA39B"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-127","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53680","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:16:35.687","lastModified":"2026-10-14T13:10:00.187","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an OS command (\"OS Command Injection\") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, FortiAP 7.2 all versions, FortiAP 7.0 all versions, FortiAP 6.4 all versions, FortiAP-U 7.0.0 through 7.0.5, FortiAP-U 6.2 all versions, FortiAP-W2 7.4.0 through 7.4.4, FortiAP-W2 7.2 all versions, FortiAP-W2 7.0 all versions allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests."},{"lang":"es","value":"Una neutralización incorrecta de elementos especiales utilizados en un comando del SO ('Inyección de comandos del SO') vulnerabilidad [CWE-78] vulnerabilidad en Fortinet FortiAP 7.6.0 hasta 7.6.2, FortiAP 7.4.0 hasta 7.4.5, FortiAP 7.2 todas las versiones, FortiAP 7.0 todas las versiones, FortiAP 6.4 todas las versiones, FortiAP-U 7.0.0 hasta 7.0.5, FortiAP-U 6.2 todas las versiones, FortiAP-W2 7.4.0 hasta 7.4.4, FortiAP-W2 7.2 todas las versiones, FortiAP-W2 7.0 todas las versiones permite a un atacante autenticado y privilegiado ejecutar código o comandos no autorizados a través de solicitudes CLI manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAP-U","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiap-u:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:6.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:6.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:6.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:6.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-u:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.0","lessThanOrEqual":"7.0.5","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAP-W2","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiap-w2:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAP","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiap:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.3:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.3","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T00:00:00+00:00","id":"CVE-2025-53680","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"18EEF706-844E-42A4-A8A7-A76EDFD75CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"4CC1B150-4BDE-473A-833E-C680933B585F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.6","matchCriteriaId":"3A204363-7F30-46EB-AB10-9A40235EE24F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.4.5","matchCriteriaId":"D0616584-0837-4800-9A3D-90D0F0F43278"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-131","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53681","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:16:35.860","lastModified":"2026-10-07T09:10:00.160","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an SQL Command (\"SQL Injection&\") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated privileged attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando SQL (vulnerabilidad de 'inyección SQL&') vulnerabilidad [CWE-89] vulnerabilidad en Fortinet FortiMail 7.6.0 a 7.6.3, FortiMail 7.4.0 a 7.4.5, FortiMail 7.2.0 a 7.2.8 permite a un atacante privilegiado autenticado ejecutar código o comandos no autorizados a través de solicitudes HTTP o HTTPS específicamente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T00:00:00+00:00","id":"CVE-2025-53681","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.9","matchCriteriaId":"02D89460-9292-4056-B208-BB2284A784AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"CD7BB23F-5FF4-49C0-8F1B-406D4057DE20"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"6F11D4E8-2671-408A-8028-005ABD367084"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-132","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53844","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:16:35.983","lastModified":"2026-10-07T09:10:00.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets."},{"lang":"es","value":"Una vulnerabilidad de escritura fuera de límites en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4.0 hasta 7.4.8, FortiOS 7.2.0 hasta 7.2.11 permite al atacante ejecutar código o comandos no autorizados a través de paquetes especialmente diseñados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.17","versionType":"semver","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.0.18","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T00:00:00+00:00","id":"CVE-2025-53844","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"E8FAAA2E-7A53-4F6B-A9C7-1E2B4CB5F7EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"2093EFE3-4B7F-4806-9850-C42B26BC64AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-123","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-53870","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:16:36.140","lastModified":"2026-10-14T13:10:00.187","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, FortiAP 7.2 all versions, FortiAP 7.0 all versions, FortiAP 6.4 all versions, FortiAP-W2 7.4.0 through 7.4.4, FortiAP-W2 7.2 all versions, FortiAP-W2 7.0 all versions may allow  an authenticated attacker to execute unauthorized code or commands via a specifically crafted cli command."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando de sistema operativo ('inyección de comandos de SO') en Fortinet FortiAP 7.6.0 hasta 7.6.2, FortiAP 7.4.0 hasta 7.4.5, FortiAP 7.2 todas las versiones, FortiAP 7.0 todas las versiones, FortiAP 6.4 todas las versiones, FortiAP-W2 7.4.0 hasta 7.4.4, FortiAP-W2 7.2 todas las versiones, FortiAP-W2 7.0 todas las versiones puede permitir a un atacante autenticado ejecutar código o comandos no autorizados mediante un comando cli específicamente diseñado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAP","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiap:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap:6.4.3:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"},{"version":"6.4.3","lessThanOrEqual":"6.4.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAP-W2","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiap-w2:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiap-w2:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T00:00:00+00:00","id":"CVE-2025-53870","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.6","matchCriteriaId":"18EEF706-844E-42A4-A8A7-A76EDFD75CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"4CC1B150-4BDE-473A-833E-C680933B585F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.6","matchCriteriaId":"698B2A95-2110-4584-8648-F8DE6ADBC75E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.5","matchCriteriaId":"3874C47E-B5F5-47E1-8A90-F376B8975BDE"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-133","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-67604","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:16:36.470","lastModified":"2026-10-14T13:10:00.187","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow an authenticated attacker to cause a system hang via multiple specially crafted HTTP requests causing crashes. This happens if internal locks are aligned, which is out of control of the attacker."},{"lang":"es","value":"Una vulnerabilidad de uso de función potencialmente peligrosa en Fortinet FortiAnalyzer 7.6.0 hasta 7.6.4, FortiAnalyzer 7.4.0 hasta 7.4.8, FortiAnalyzer 7.2 todas las versiones, FortiAnalyzer 7.0 todas las versiones, FortiAnalyzer 6.4 todas las versiones, FortiManager 7.6.0 hasta 7.6.4, FortiManager 7.4.0 hasta 7.4.8, FortiManager 7.2 todas las versiones, FortiManager 7.0 todas las versiones, FortiManager 6.4 todas las versiones puede permitir a un atacante autenticado causar un cuelgue del sistema a través de múltiples solicitudes HTTP especialmente diseñadas que provocan fallos. Esto ocurre si los bloqueos internos están alineados, lo cual está fuera del control del atacante."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T19:00:29.874258Z","id":"CVE-2025-67604","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-676"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.12","matchCriteriaId":"5B42B20E-3FBB-4C2E-B7C8-EB5E97A81DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"2941DC1A-2CA0-4459-99F3-3D7EBFE8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"00645EEE-3E67-4B98-BB49-B23AD1D60B54"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.12","matchCriteriaId":"B4236E74-B734-43AC-A32B-462D6E4B1CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"45291819-E95A-45DC-B79E-DA0AB4BF4E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.5","matchCriteriaId":"9F4A9AA3-C6AA-428B-AE1B-61F61658D642"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-137","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-25088","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:16:39.327","lastModified":"2026-10-26T18:10:00.173","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via  specifically crafted HTTP requests."},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando SQL (’inyección SQL’) vulnerabilidad en Fortinet FortiNDR 7.6.0 a 7.6.2, FortiNDR 7.4.0 a 7.4.9, FortiNDR 7.2 todas las versiones, FortiNDR 7.1 todas las versiones, FortiNDR 7.0 todas las versiones puede permitir a un atacante autenticado ejecutar código o comandos no autorizados a través de solicitudes HTTP específicamente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiNDR","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortindr:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortindr:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.1","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T18:59:39.373512Z","id":"CVE-2026-25088","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.10","matchCriteriaId":"A1FFFEEE-7A3C-43F8-A356-E81AE296BA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"E1103654-9C93-49DC-90FE-5B078D53C94A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-134","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-25690","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:16:39.540","lastModified":"2026-10-26T18:10:00.173","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2.0 through 5.2.1, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with at least read-only admin permission to read log files via HTTP crafted requests."},{"lang":"es","value":"Una neutralización incorrecta de delimitadores de argumentos en un comando (’inyección de argumentos’) vulnerabilidad en Fortinet FortiDeceptor 6.0.0 hasta 6.0.2, FortiDeceptor 5.3.0 hasta 5.3.3, FortiDeceptor 5.2.0 hasta 5.2.1, FortiDeceptor 5.1 todas las versiones, FortiDeceptor 5.0 todas las versiones puede permitir a un atacante autenticado con al menos permiso de administrador de solo lectura leer archivos de registro a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiDeceptor","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortideceptor:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortideceptor:5.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.2","versionType":"semver","status":"affected"},{"version":"5.3.0","lessThanOrEqual":"5.3.3","versionType":"semver","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.1","versionType":"semver","status":"affected"},{"version":"5.1.0","status":"affected"},{"version":"5.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T19:00:14.405140Z","id":"CVE-2026-25690","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.1.0","matchCriteriaId":"529C7194-BEA5-47FE-A317-59D85FD444FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.3.3","matchCriteriaId":"50797191-4601-4419-815A-63F2AB1A15DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.2","matchCriteriaId":"E1992EF6-28F6-4E42-8E1B-3635C7F56799"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"6FA247B9-FC0D-4E38-A29A-518331F84C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortideceptor:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BB69110A-08A1-444F-9B67-E098D07534E4"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-138","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-26083","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:16:39.817","lastModified":"2026-11-06T16:18:01.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.0 through 5.0.1, FortiSandbox Cloud 4.4.5 through 4.4.8, FortiSandbox PaaS 23.4 all versions, FortiSandbox PaaS 23.3 all versions, FortiSandbox PaaS 23.1 all versions, FortiSandbox PaaS 22.2 all versions, FortiSandbox PaaS 22.1 all versions, FortiSandbox PaaS 21.4 all versions, FortiSandbox PaaS 21.3 all versions, FortiSandbox PaaS 5.0.0 through 5.0.1, FortiSandbox PaaS 4.4.5 through 4.4.8 may allow an unauthenticated attacker to execute unauthorized code or commands via HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de autorización faltante en Fortinet FortiSandbox 5.0.0 hasta 5.0.1, FortiSandbox 4.4.0 hasta 4.4.8, FortiSandbox Cloud 5.0.2 hasta 5.0.5, FortiSandbox PaaS 23.4 todas las versiones, FortiSandbox PaaS 23.3 todas las versiones, FortiSandbox PaaS 23.1 todas las versiones, FortiSandbox PaaS 22.2 todas las versiones, FortiSandbox PaaS 22.1 todas las versiones, FortiSandbox PaaS 21.4 todas las versiones, FortiSandbox PaaS 21.3 todas las versiones, FortiSandbox PaaS 5.0.0 hasta 5.0.1, FortiSandbox PaaS 4.4.5 hasta 4.4.8 puede permitir a un atacante no autenticado ejecutar código o comandos no autorizados a través de solicitudes HTTP."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.1","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxcloud:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.5:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.1","versionType":"semver","status":"affected"},{"version":"4.4.5","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:23.4.4374:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:23.4.4350:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:23.3.4329:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:23.1.4245:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:22.2.4151:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:22.2.4134:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:22.1.4113:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:21.4.4072:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:21.3.4055:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.5:*:*:*:*:*:*:*"],"versions":[{"version":"23.4.4374","status":"affected"},{"version":"23.4.4350","status":"affected"},{"version":"23.3.4329","status":"affected"},{"version":"23.1.4245","status":"affected"},{"version":"22.2.4151","status":"affected"},{"version":"22.2.4134","status":"affected"},{"version":"22.1.4113","status":"affected"},{"version":"21.4.4072","status":"affected"},{"version":"21.3.4055","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.1","versionType":"semver","status":"affected"},{"version":"4.4.5","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T00:00:00+00:00","id":"CVE-2026-26083","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.9","matchCriteriaId":"0025C9C0-8D61-4563-96F9-F4E09DD83B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.2","matchCriteriaId":"42640C50-5490-4B50-840B-D35031671C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.2","versionEndExcluding":"5.0.6","matchCriteriaId":"BB973322-626C-4821-882A-125DD5177251"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"23.1.4245","versionEndIncluding":"23.4.4374","matchCriteriaId":"7100CD0B-358B-4610-BB84-6E378571176D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:24.1.4436:*:*:*:*:*:*:*","matchCriteriaId":"529FB46C-C0E5-43F5-A753-DD9E928FD4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_paas:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.5","versionEndExcluding":"4.4.9","matchCriteriaId":"251F88A0-B42A-475B-80BA-1A6B53620EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_paas:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.2","matchCriteriaId":"704EB14E-435A-4AC6-9FBC-C8A926BA22F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_paas:*:*:*:*:*:*:*:*","versionStartIncluding":"21.3.4055","versionEndIncluding":"23.4.4374","matchCriteriaId":"594E2353-2D20-400E-B9EA-7A08A49104B3"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-136","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-44277","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:17:30.040","lastModified":"2026-11-06T16:18:44.903","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.0 through 6.5.6, FortiAuthenticator 6.4.0 through 6.4.10 may allow attacker to execute unauthorized code or commands via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado en Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 a 6.6.8, FortiAuthenticator 6.5.0 a 6.5.6 puede permitir al atacante ejecutar código o comandos no autorizados mediante solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.2","status":"affected"},{"version":"8.0.0","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.8","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.6","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T18:59:33.244531Z","id":"CVE-2026-44277","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.10","matchCriteriaId":"F1E4B7B9-33C6-4CB8-9409-F3C51858C7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0","versionEndExcluding":"6.5.7","matchCriteriaId":"E863E244-F0A2-48B3-BD36-3F16B7DC1222"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.0","versionEndExcluding":"6.6.9","matchCriteriaId":"2C556C61-42F5-43DB-A5C6-1245600B7E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.3","matchCriteriaId":"5B1588CB-FBA6-4610-B055-A8123B465531"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-128","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-44278","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:17:30.177","lastModified":"2026-10-26T18:10:00.173","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de uso de clave criptográfica codificada de forma rígida en Fortinet FortiClientWindows 7.4.0 hasta 7.4.2, FortiClientWindows 7.2 todas las versiones podría permitir al atacante la revelación de información a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T18:59:50.445107Z","id":"CVE-2026-44278","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.4.3","matchCriteriaId":"8F59B977-DF9D-40E1-9946-15E80FBB11BD"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-129","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-44279","sourceIdentifier":"psirt@fortinet.com","published":"2026-05-12T18:17:30.330","lastModified":"2026-10-26T18:10:00.173","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI."},{"lang":"es","value":"Una vulnerabilidad de exportación indebida de componentes de aplicación de Android en Fortinet FortiTokenAndroid 6.2 en todas las versiones, FortiTokenAndroid 6.1 en todas las versiones, FortiTokenAndroid 5.2 en todas las versiones puede permitir al atacante divulgar información a través de una URI de Content Provider exportada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiTokenAndroid","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortitokenandroid:6.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitokenandroid:6.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitokenandroid:5.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitokenandroid:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortitokenandroid:5.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.2.0","status":"affected"},{"version":"6.1.0","status":"affected"},{"version":"5.2.0","lessThanOrEqual":"5.2.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-12T18:59:55.342232Z","id":"CVE-2026-44279","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-926"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:5.2.0:*:*:*:*:android:*:*","matchCriteriaId":"3AD3D233-A9F7-4C19-8C17-29CE1E6AB2EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:5.2.1:*:*:*:*:android:*:*","matchCriteriaId":"C31D8793-95DB-4F37-AE7A-3DC320E5AB33"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:5.2.2:*:*:*:*:android:*:*","matchCriteriaId":"3EA248A2-A583-428F-AA93-E997D2C41F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:6.1.0:*:*:*:*:android:*:*","matchCriteriaId":"930A3AE4-F6D3-41DC-B32E-2C31F5E63FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortitoken_mobile:6.2.0:*:*:*:*:android:*:*","matchCriteriaId":"0C6F34E3-5D0E-437C-81AE-459393BA668A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-130","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-67862","sourceIdentifier":"psirt@fortinet.com","published":"2026-06-09T16:16:35.500","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands."},{"lang":"es","value":"Una vulnerabilidad de activo interno expuesto a nivel o estado de acceso de depuración inseguro [CWE-1244] vulnerabilidad en Fortinet FortiOS 7.6.0 hasta 7.6.2, FortiOS 7.4.0 hasta 7.4.7, FortiOS 7.2.0 hasta 7.2.10, FortiOS 7.0.0 hasta 7.0.16, FortiOS 6.4 todas las versiones, FortiProxy 7.6.0 hasta 7.6.3, FortiProxy 7.4.0 hasta 7.4.10, FortiProxy 7.2.0 hasta 7.2.14, FortiProxy 7.0 todas las versiones puede permitir a un administrador autenticado ejecutar scripts lua mediante comandos CLI manipulados."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T00:00:00+00:00","id":"CVE-2025-67862","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1244"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndIncluding":"6.4.16","matchCriteriaId":"BB9D516D-E0DB-4A9D-B5AF-1DFFB61C91CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.16","matchCriteriaId":"0FFAAD16-9C6E-4FE3-A3C3-DE6222EADC96"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.11","matchCriteriaId":"4386465B-EFF9-41BA-B393-82135A2591DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"26515743-5A9A-4885-A08E-535E4ABE0153"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.3","matchCriteriaId":"D6B883B9-9ECD-4BC5-B497-770F34F92473"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.23","matchCriteriaId":"4FC3D6F1-4712-45DE-BF5D-77D0661C789D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.15","matchCriteriaId":"4B2E82CF-00E9-4D67-B472-E54A325F87FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.11","matchCriteriaId":"F989EFB6-A5C9-414B-A85B-786D309B41AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.4","matchCriteriaId":"11CA0204-FD63-4614-821E-E2C4E34F7979"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-143","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-25089","sourceIdentifier":"psirt@fortinet.com","published":"2026-06-09T16:16:39.943","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests"},{"lang":"es","value":"Una neutralización inadecuada de elementos especiales utilizados en un comando de sistema operativo ('inyección de comandos de sistema operativo') vulnerabilidad en Fortinet FortiSandbox 5.0.0 hasta 5.0.5, FortiSandbox 4.4.0 hasta 4.4.8, FortiSandbox 4.2 todas las versiones, FortiSandbox Cloud 5.0.4 hasta 5.0.5, FortiSandbox PaaS 5.0.4 hasta 5.0.5 puede permitir a un atacante no autenticado ejecutar comandos no autorizados a través de solicitudes HTTP específicamente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxcloud:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.4","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.4","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T00:00:00+00:00","id":"CVE-2026-25089","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-07-16","cisaActionDue":"2026-07-19","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Fortinet FortiSandbox OS Command Injection Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndIncluding":"4.2.8","matchCriteriaId":"814D77BE-F536-42DE-B068-F92B95D68248"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.4.9","matchCriteriaId":"0025C9C0-8D61-4563-96F9-F4E09DD83B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.6","matchCriteriaId":"3AAEF316-2134-4398-911C-E7532CD3AFF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.4","versionEndExcluding":"5.0.6","matchCriteriaId":"D479507F-4DD8-4455-A8DB-138AD56C6822"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox_paas:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.4","versionEndExcluding":"5.0.6","matchCriteriaId":"61A9A2E9-3086-4172-B3A3-212873B8C4A9"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-141","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-25089","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-49938","sourceIdentifier":"psirt@fortinet.com","published":"2026-06-09T16:16:43.323","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper access control via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de control de acceso inadecuado en Fortinet FortiPortal 7.4.0 a 7.4.7, FortiPortal 7.2.0 a 7.2.8, FortiPortal 7.0 todas las versiones puede permitir al atacante un control de acceso inadecuado a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPortal","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiportal:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiportal:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.14","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T15:36:51.644752Z","id":"CVE-2026-49938","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.2.9","matchCriteriaId":"6DE47F08-7AFB-4D88-A8F0-7A39F2F059D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.8","matchCriteriaId":"AE9AA42A-EDED-4497-A495-8494527C489A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-140","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-43892","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:16:42.340","lastModified":"2026-09-29T14:10:00.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request."},{"lang":"es","value":"Una vulnerabilidad de lectura excesiva de búfer en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4.0 hasta 7.4.8, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones puede permitir a un atacante remoto autenticado devolver una porción de la memoria del dispositivo en la respuesta de redirección mediante el envío de una solicitud especialmente diseñada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T15:57:30.990330Z","id":"CVE-2025-43892","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-126"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.15","matchCriteriaId":"33FE9C6F-F5A1-43E4-917E-32497D6CC5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.13","matchCriteriaId":"124559B6-EFA8-428D-B205-C0216B5FA1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.5","matchCriteriaId":"B9154BCC-5BD2-4453-AFCD-20ECD82341AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.13","matchCriteriaId":"BEA4D8BF-96C4-49ED-8DB4-C17DAB050B14"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndIncluding":"7.4.8","matchCriteriaId":"ACF34737-DB9E-4E9D-80A1-6185BFFEB8D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.2","matchCriteriaId":"4F98567C-A320-4AA1-947B-974567EB770C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/#5944","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-53379","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:16:42.477","lastModified":"2026-09-29T19:10:00.160","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request."},{"lang":"es","value":"Una vulnerabilidad de lectura fuera de límites en Fortinet FortiAuthenticator 6.6.0 hasta 6.6.2, FortiAuthenticator 6.5 todas las versiones puede permitir a un atacante remoto no autenticado recuperar información sensible a través de una solicitud especialmente diseñada."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"6.6.0","lessThanOrEqual":"6.6.2","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.7","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.11","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T15:55:57.538368Z","id":"CVE-2025-53379","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0","versionEndIncluding":"6.5.7","matchCriteriaId":"0B13D3AC-1B1C-4624-99C9-37C17DE156EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.0","versionEndIncluding":"6.6.2","matchCriteriaId":"FCC8D6E3-76D3-4713-A6CE-2CA6D45FB6A4"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-146","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-62675","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:16:42.617","lastModified":"2026-09-29T15:10:00.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker in possession of a valid web filter override token to inject arbitrary headers via tricking a user into clicking on a crafted link."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de secuencias CRLF en encabezados HTTP ('División de respuesta HTTP') [CWE-113] vulnerabilidad en Fortinet FortiOS 7.6.0 hasta 7.6.4, FortiOS 7.4 todas las versiones, FortiOS 7.2 todas las versiones, FortiProxy 7.6.0 hasta 7.6.4, FortiProxy 7.4 todas las versiones, FortiProxy 7.2 todas las versiones puede permitir a un atacante en posesión de un token de anulación de filtro web válido inyectar encabezados arbitrarios mediante el engaño a un usuario para que haga clic en un enlace manipulado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.12","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.7.0","status":"affected"},{"version":"1.6.0","lessThanOrEqual":"1.6.2","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.14","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N","baseScore":3.4,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T16:02:37.813993Z","id":"CVE-2025-62675","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-113"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.6.5","matchCriteriaId":"C0C2DFB7-AFEB-41CF-B1E2-52F908AFF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.6.5","matchCriteriaId":"5AAADD9A-703E-4E09-8D23-8DE9A5E5EC56"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-152","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-62826","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:16:42.850","lastModified":"2026-09-29T15:10:00.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker able to intercept and modify a user's captive portal authentication request to inject arbitrary headers via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de secuencias CRLF en encabezados HTTP ('División de respuesta HTTP') [CWE-113] vulnerabilidad en Fortinet FortiOS 7.6.0 hasta 7.6.4, FortiOS 7.4 todas las versiones, FortiOS 7.2 todas las versiones, FortiProxy 7.6.0 hasta 7.6.4, FortiProxy 7.4 todas las versiones, FortiProxy 7.2 todas las versiones puede permitir a un atacante capaz de interceptar y modificar la solicitud de autenticación del portal cautivo de un usuario inyectar encabezados arbitrarios a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.7.0","status":"affected"},{"version":"1.6.0","lessThanOrEqual":"1.6.2","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.14","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":3.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T16:02:21.507604Z","id":"CVE-2025-62826","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-113"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.6.5","matchCriteriaId":"C0C2DFB7-AFEB-41CF-B1E2-52F908AFF405"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.6.5","matchCriteriaId":"5AAADD9A-703E-4E09-8D23-8DE9A5E5EC56"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-153","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-23573","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:16:51.823","lastModified":"2026-10-24T21:10:00.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.8.0, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 through 7.2.9 may allow an authenticated remote user to execute code or commands via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web (’cross-site scripting’) [CWE-79] vulnerabilidad en Fortinet FortiOS 7.6.0 hasta 7.6.6, FortiOS 7.4 todas las versiones, FortiOS 7.2 todas las versiones, FortiPAM 1.8.0, FortiPAM 1.7 todas las versiones, FortiPAM 1.6 todas las versiones, FortiPAM 1.5 todas las versiones, FortiPAM 1.4 todas las versiones, FortiPAM 1.3 todas las versiones, FortiPAM 1.2 todas las versiones, FortiPAM 1.1 todas las versiones, FortiPAM 1.0 todas las versiones, FortiProxy 7.4.0 hasta 7.4.3, FortiProxy 7.2.0 hasta 7.2.9 puede permitir a un usuario remoto autenticado ejecutar código o comandos mediante solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.12","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.8.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.8.0","status":"affected"},{"version":"1.7.0","lessThanOrEqual":"1.7.2","versionType":"semver","status":"affected"},{"version":"1.6.0","lessThanOrEqual":"1.6.2","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T15:57:48.078417Z","id":"CVE-2026-23573","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.10","matchCriteriaId":"EDFFA2C3-0A23-4884-B751-785BE598DFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"3F2C29AD-A11F-4A5F-8BB0-8600D5F77E72"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.6.7","matchCriteriaId":"ED19CCEA-A3FA-46D3-BEC0-3F03B05F2528"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.8.1","matchCriteriaId":"74B9F42A-7A0B-489C-B581-99A1009229F0"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-150","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-127084.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-59835","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:17:02.593","lastModified":"2026-10-24T21:10:00.130","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests."},{"lang":"es","value":"Una vulnerabilidad de exposición de recurso a esfera incorrecta en Fortinet FortiSandbox 5.0.0 hasta 5.0.2, FortiSandbox 4.4.3 hasta 4.4.8 puede permitir a un atacante no autenticado acceder al servidor VNC de las VMs que realizan el escaneo a través de solicitudes de red."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.2","versionType":"semver","status":"affected"},{"version":"4.4.3","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","baseScore":8.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":4.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T15:55:18.212803Z","id":"CVE-2026-59835","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-668"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.3","versionEndExcluding":"4.4.9","matchCriteriaId":"733F4C04-3FDF-4F9D-AE7B-154FB95A5E20"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.3","matchCriteriaId":"7A1CEA31-8309-4B13-8A3C-4830394A728D"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-145","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-59836","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:17:02.727","lastModified":"2026-10-24T21:10:00.130","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de validación de certificado incorrecta en Fortinet FortiClientEMS 7.4.3 hasta 7.4.5, FortiClientEMS 7.4.0 hasta 7.4.1, FortiClientEMS 7.2 todas las versiones puede permitir al atacante la revelación de información a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.3","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.12","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T00:00:00+00:00","id":"CVE-2026-59836","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.4.1","matchCriteriaId":"C14D03A0-DDAB-4B40-92E1-65E2EB388F0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.3","versionEndExcluding":"7.4.6","matchCriteriaId":"540023A6-0E3D-4E05-8F3B-577A9AAAC973"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-147","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-59837","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:17:02.853","lastModified":"2026-10-29T17:18:09.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow a privileged authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en pila en Fortinet FortiOS 7.4.0 hasta 7.4.1, FortiOS 7.2 todas las versiones, FortiPAM 1.8.0 hasta 1.8.2, FortiPAM 1.7 todas las versiones, FortiPAM 1.6 todas las versiones, FortiPAM 1.5 todas las versiones, FortiPAM 1.4 todas las versiones, FortiPAM 1.3 todas las versiones, FortiPAM 1.2 todas las versiones, FortiPAM 1.1 todas las versiones, FortiPAM 1.0 todas las versiones, FortiProxy 7.4.0 hasta 7.4.13, FortiProxy 7.2 todas las versiones puede permitir a un atacante autenticado privilegiado que puede eludir la protección de pila y ASLR ejecutar código o comandos arbitrarios a través de solicitudes HTTP manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.8.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.8.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.8.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.8.0","lessThanOrEqual":"1.8.2","versionType":"semver","status":"affected"},{"version":"1.7.0","lessThanOrEqual":"1.7.2","versionType":"semver","status":"affected"},{"version":"1.6.0","lessThanOrEqual":"1.6.2","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T00:00:00+00:00","id":"CVE-2026-59837","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.4.14","matchCriteriaId":"E4DD2081-7893-4FAE-B737-17AAABCE4A64"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.4.2","matchCriteriaId":"B2FEDF57-EECE-4D51-8784-49A8A1745F65"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.8.3","matchCriteriaId":"3118474A-F498-426C-970D-A7FB1A57C1E3"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-148","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-59839","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:17:03.047","lastModified":"2026-10-24T21:10:00.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido (’salto de ruta’) en Fortinet FortiOS 7.6.0 hasta 7.6.6, FortiOS 7.4.0 hasta 7.4.9, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones, FortiPAM 1.8.0, FortiPAM 1.7.0 hasta 1.7.2, FortiPAM 1.6 todas las versiones, FortiPAM 1.5 todas las versiones, FortiPAM 1.4 todas las versiones, FortiPAM 1.3 todas las versiones, FortiPAM 1.2 todas las versiones, FortiPAM 1.1 todas las versiones, FortiPAM 1.0 todas las versiones, FortiProxy 7.6.0 hasta 7.6.5, FortiProxy 7.4 hasta 7.4.13, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones puede permitir al atacante ejecutar código o comandos no autorizados a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.8.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.8.0","status":"affected"},{"version":"1.7.0","lessThanOrEqual":"1.7.2","versionType":"semver","status":"affected"},{"version":"1.6.0","lessThanOrEqual":"1.6.2","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.3,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T16:02:03.651467Z","id":"CVE-2026-59839","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.4.14","matchCriteriaId":"C9773959-31C4-4F6B-90BF-91F3A678289E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.6","matchCriteriaId":"993F9495-8C36-4C4E-B221-DF914A24E181"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.4.10","matchCriteriaId":"8E0DD361-4041-480A-8B5E-1E14BBDD8133"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.7","matchCriteriaId":"E84ACF30-8197-4A7A-8CFD-621307F607EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.7.3","matchCriteriaId":"33BC1A9D-098D-4093-A6A9-58129F8ADE6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortipam:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"18ED4C26-8F3A-4682-80A6-178F45D64ACD"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-151","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-127084.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-59840","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:17:03.297","lastModified":"2026-10-24T21:10:00.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de lectura excesiva de búfer en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4.0 hasta 7.4.8, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones, FortiProxy 7.6.0 hasta 7.6.5, FortiProxy 7.4.0 hasta 7.4.13, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones puede permitir al atacante la revelación de información a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.7.0","status":"affected"},{"version":"1.6.0","lessThanOrEqual":"1.6.2","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitchManager","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitchmanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T15:57:19.678421Z","id":"CVE-2026-59840","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-126"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.4.14","matchCriteriaId":"E4DD2081-7893-4FAE-B737-17AAABCE4A64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.6","matchCriteriaId":"993F9495-8C36-4C4E-B221-DF914A24E181"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.4.9","matchCriteriaId":"ACC80535-E55F-4A58-8010-2C5E4616ED7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndIncluding":"7.6.2","matchCriteriaId":"4F98567C-A320-4AA1-947B-974567EB770C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-154","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-59841","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-14T16:17:03.520","lastModified":"2026-10-24T21:10:00.130","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de restricción inadecuada del canal de comunicación a puntos finales previstos en Fortinet FortiSIEMWindowsAgent 7.4.0 hasta 7.4.1 puede permitir al atacante la escalada de privilegios a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEMWindowsAgent","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiemwindowsagent:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiemwindowsagent:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T00:00:00+00:00","id":"CVE-2026-59841","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-923"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.2","matchCriteriaId":"FB59904B-150E-4D61-96F5-B07C5FF9641E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-155","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-59838","sourceIdentifier":"psirt@fortinet.com","published":"2026-07-15T14:18:33.057","lastModified":"2026-10-24T21:10:00.130","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de neutralización inadecuada de etiquetas HTML relacionadas con scripts en una página web (XSS básico) en Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 hasta 7.3.4, FortiSIEM 7.2.0 hasta 7.2.6, FortiSIEM 7.1 todas las versiones, FortiSIEM 7.0 todas las versiones, FortiSIEM 6.7 todas las versiones, FortiSIEM 6.6 todas las versiones, FortiSIEM 6.5 todas las versiones, FortiSIEM 6.4 todas las versiones puede permitir al atacante ejecutar código o comandos no autorizados a través de <insertar vector de ataque aquí>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.4","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.6","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.10","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.5","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"},{"version":"6.3.0","lessThanOrEqual":"6.3.3","versionType":"semver","status":"affected"},{"version":"6.2.0","lessThanOrEqual":"6.2.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.7,"impactScore":3.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.7,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-15T14:23:06.140913Z","id":"CVE-2026-59838","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-80"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"7.2.7","matchCriteriaId":"2027BD6B-7592-426A-B110-6EEFEF9BFC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.5","matchCriteriaId":"C41BBF42-F97A-4358-ADB6-9762BD8F3CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"500DAB25-48C9-48C7-B7CD-92C06989F039"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-149","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-70465","sourceIdentifier":"psirt@fortinet.com","published":"2026-08-12T12:19:47.017","lastModified":"2026-10-24T15:10:00.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets."},{"lang":"es","value":"Una vulnerabilidad de copia de búfer sin verificar el tamaño de la entrada (’desbordamiento de búfer clásico’) en Fortinet FortiClientWindows 7.4.0 hasta 7.4.3, FortiClientWindows 7.2.0 hasta 7.2.11 puede permitir a un atacante no autenticado en posición de alterar o elaborar respuestas DNS al host objetivo ejecutar código arbitrario a través de paquetes maliciosos."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.3","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T00:00:00+00:00","id":"CVE-2026-70465","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.12","matchCriteriaId":"D671714A-3C4B-4653-884F-4A557C2ED5C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.4","matchCriteriaId":"51121FCA-2CA9-4B4B-A27C-C4729AB797BB"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-156","source":"psirt@fortinet.com","tags":["Vendor Advisory","Mitigation"]}]}},{"cve":{"id":"CVE-2026-26035","sourceIdentifier":"psirt@fortinet.com","published":"2026-08-12T13:17:22.307","lastModified":"2026-10-23T20:10:00.160","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote unauthenticated attacker to login into the Fortiweb GUI/CLI with a random username and password"},{"lang":"es","value":"Una vulnerabilidad de autenticación incorrecta [CWE-287] en Fortinet FortiWeb 8.0.0 hasta 8.0.2, FortiWeb 7.6.0 hasta 7.6.6, FortiWeb 7.4.0 hasta 7.4.11, FortiWeb 7.2.0 hasta 7.2.12, FortiWeb 7.0.0 hasta 7.0.12 puede permitir a un atacante remoto no autenticado iniciar sesión en la GUI/CLI de Fortiweb con un nombre de usuario y contraseña aleatorios."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.2","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.11","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T00:00:00+00:00","id":"CVE-2026-26035","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.13","matchCriteriaId":"6B9458FC-3403-4125-A4A9-C15E1A4AFD29"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.12","matchCriteriaId":"00447564-4A90-4194-85FF-A8C047796A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.7","matchCriteriaId":"15C9CDE3-FE6F-4946-A3DC-FDD7A5F99D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.3","matchCriteriaId":"C82F9CC0-7683-4CDE-8370-153400605B55"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-158","source":"psirt@fortinet.com","tags":["Vendor Advisory","Mitigation"]}]}},{"cve":{"id":"CVE-2026-70466","sourceIdentifier":"psirt@fortinet.com","published":"2026-08-12T13:17:24.883","lastModified":"2026-11-06T16:18:58.367","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A incomplete list of disallowed inputs vulnerability [CWE-184] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via specifically crafted requests."},{"lang":"es","value":"Una vulnerabilidad de lista incompleta de entradas no permitidas en Fortinet FortiWeb 8.0.0 hasta 8.0.2, FortiWeb 7.6.0 hasta 7.6.5, FortiWeb 7.4 todas las versiones, FortiWeb 7.2 todas las versiones, FortiWeb 7.0 todas las versiones puede permitir a un atacante un control de acceso inadecuado a través de menor queinsertar vector de ataque aquímayor que"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiWeb","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.2","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.12","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T00:00:00+00:00","id":"CVE-2026-70466","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-184"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.6.6","matchCriteriaId":"4F2631CD-3268-4424-8320-2BCD6C5337EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.3","matchCriteriaId":"C82F9CC0-7683-4CDE-8370-153400605B55"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-157","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-70467","sourceIdentifier":"psirt@fortinet.com","published":"2026-08-12T13:17:25.070","lastModified":"2026-10-24T15:10:00.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 hasta 7.4.2, FortiSIEM 7.3.0 hasta 7.3.5, FortiSIEM 7.2 todas las versiones, FortiSIEM 7.1 todas las versiones, FortiSIEM 7.0 todas las versiones, FortiSIEM 6.7 todas las versiones, FortiSIEM 6.6 todas las versiones, FortiSIEM 6.5 todas las versiones podría permitir al atacante ejecutar código o comandos no autorizados a través de menor queinsertar vector de ataque aquímayor que"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.5.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.10","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.5","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.3","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","baseScore":3.8,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-13T15:41:36.309292Z","id":"CVE-2026-70467","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5.0","versionEndExcluding":"7.3.6","matchCriteriaId":"FE82A240-76CD-48D7-8746-6F5A7A8C410E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.3","matchCriteriaId":"B2C12797-B556-4946-963D-F01B20DD5300"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortisiem:7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0EC466EA-39D4-4561-BB85-A5DCA4F8007C"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-159","source":"psirt@fortinet.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-70468","sourceIdentifier":"psirt@fortinet.com","published":"2026-08-12T13:17:25.227","lastModified":"2026-10-24T15:10:00.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>"},{"lang":"es","value":"Una vulnerabilidad de omisión de autenticación utilizando una ruta o canal alternativo en Fortinet FortiManager 7.6.1, FortiManager 7.4.3 a 7.4.5, FortiManager 7.2.5 a 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 a 7.4.5, FortiManager Cloud 7.2.5 a 7.2.9 puede permitir al atacante un control de acceso inadecuado a través de menor queinsertar vector de ataque aquímayor que"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.1","status":"affected"},{"version":"7.4.3","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.5","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.1","status":"affected"},{"version":"7.4.3","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.5","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T00:00:00+00:00","id":"CVE-2026-70468","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.5","versionEndExcluding":"7.2.10","matchCriteriaId":"88F5C2ED-4F65-4579-8227-29FB64422C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.3","versionEndExcluding":"7.4.6","matchCriteriaId":"0E642AB7-A2B0-4E38-9C34-B918F041D4D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E4EB37D1-158E-4C19-966E-328980CF5DC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.5","versionEndExcluding":"7.2.10","matchCriteriaId":"6F00D039-7104-446D-BB6D-F8A9E90FD8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.3","versionEndIncluding":"7.4.6","matchCriteriaId":"EFEA33E6-7AAD-4C5B-BA4C-8D783526EF87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimanager_cloud:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F144EF3A-25C4-4AAF-B45B-985C6E1A6A7A"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-160","source":"psirt@fortinet.com","tags":["Vendor Advisory","Mitigation"]}]}},{"cve":{"id":"CVE-2026-71407","sourceIdentifier":"psirt@fortinet.com","published":"2026-08-12T13:17:25.497","lastModified":"2026-11-06T16:18:58.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled."},{"lang":"es","value":"Una vulnerabilidad de desbordamiento de búfer basado en pila [CWE-121] en Fortinet FortiOS 7.6.1 hasta 7.6.6 puede permitir a un atacante no autenticado que puede eludir la protección de pila y ASLR ejecutar código o comandos arbitrarios en el contexto del demonio WAD a través de sockets manipulados, solo si el proxy explícito está configurado con autenticación Kerberos y SOCKS habilitado."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.1","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T00:00:00+00:00","id":"CVE-2026-71407","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.1","versionEndExcluding":"7.6.7","matchCriteriaId":"ECC5A3E0-228C-4207-86F1-42C51201EFA3"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-161","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-127084.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-71408","sourceIdentifier":"psirt@fortinet.com","published":"2026-08-12T13:17:25.677","lastModified":"2026-10-29T17:18:10.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an unauthenticated attacker to perform a slow HTTP DoS attack on the web interface via crafted HTTP requests."},{"lang":"es","value":"Una vulnerabilidad de asignación de recursos sin límites ni limitación en Fortinet FortiOS 7.6.0 hasta 7.6.6, FortiOS 7.4 en todas sus versiones, FortiOS 7.2 en todas sus versiones puede permitir al atacante la denegación de servicio a través de menor queinsertar vector de ataque aquímayor que"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T13:43:18.592855Z","id":"CVE-2026-71408","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","versionEndExcluding":"7.6.7","matchCriteriaId":"EEC2C8A5-B13B-40A3-A97A-1FBF0758A2E7"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-162","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-127084.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-22575","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-08T17:17:34.407","lastModified":"2026-09-08T18:35:10.323","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.15","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:6.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.1","lessThanOrEqual":"7.0.16","versionType":"semver","status":"affected"},{"version":"6.4.1","lessThanOrEqual":"6.4.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-08T17:28:52.915929Z","id":"CVE-2026-22575","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-171","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-26084","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-08T17:17:34.590","lastModified":"2026-11-06T16:18:01.197","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxcloud:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.4","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.4","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H","baseScore":9.9,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.3}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-08T17:31:09.979157Z","id":"CVE-2026-26084","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-166","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-84385","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-08T17:18:37.030","lastModified":"2026-11-03T23:17:57.440","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow attacker to escalation of privilege via <insert attack vector here>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSOAR on-premise","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoaron-premise:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoaron-premise:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSOAR PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisoarpaas:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisoarpaas:7.3.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.5.0","lessThanOrEqual":"7.5.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-10T03:56:52.186551Z","id":"CVE-2026-84385","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-164","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-84386","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-08T17:18:37.173","lastModified":"2026-10-02T15:17:11.213","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.15","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-08T17:42:21.974285Z","id":"CVE-2026-84386","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-283"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-165","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-84387","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-08T17:18:37.290","lastModified":"2026-10-29T17:18:10.893","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.2.0","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.6","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.9","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-08T17:39:27.548486Z","id":"CVE-2026-84387","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-167","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-84389","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-08T17:18:37.410","lastModified":"2026-11-03T23:17:57.643","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":3.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-10T03:56:51.480994Z","id":"CVE-2026-84389","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-169","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-84391","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-08T17:18:37.520","lastModified":"2026-11-06T16:18:59.473","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via SNMP GETBULK requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.3","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-08T17:29:24.379449Z","id":"CVE-2026-84391","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-457"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-172","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-84392","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-08T17:18:37.670","lastModified":"2026-10-29T17:18:11.017","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.14","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortipam:1.9.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.8.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.8.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.8.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.8.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.8.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"1.9.0","status":"affected"},{"version":"1.8.0","lessThanOrEqual":"1.8.4","versionType":"semver","status":"affected"},{"version":"1.7.0","lessThanOrEqual":"1.7.2","versionType":"semver","status":"affected"},{"version":"1.6.0","lessThanOrEqual":"1.6.2","versionType":"semver","status":"affected"},{"version":"1.5.0","lessThanOrEqual":"1.5.1","versionType":"semver","status":"affected"},{"version":"1.4.0","lessThanOrEqual":"1.4.3","versionType":"semver","status":"affected"},{"version":"1.3.0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"},{"version":"1.2.0","status":"affected"},{"version":"1.1.0","lessThanOrEqual":"1.1.2","versionType":"semver","status":"affected"},{"version":"1.0.0","lessThanOrEqual":"1.0.3","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-08T17:28:19.717770Z","id":"CVE-2026-84392","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-173","source":"psirt@fortinet.com"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-84393","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-08T17:18:37.883","lastModified":"2026-10-15T02:20:16.757","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.1","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-09T00:00:00+00:00","id":"CVE-2026-84393","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-297"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-174","source":"psirt@fortinet.com"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-127084.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-84390","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-11T13:18:18.980","lastModified":"2026-09-11T18:24:59.400","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via <insert attack vector here>"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMonitorOnSight","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimonitoronsight:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimonitoronsight:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimonitoronsight:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimonitoronsight:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimonitoronsight:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimonitoronsight:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimonitoronsight:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.2.4","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-11T12:44:29.513668Z","id":"CVE-2026-84390","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-540"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-170","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-84388","sourceIdentifier":"psirt@fortinet.com","published":"2026-09-22T15:17:18.950","lastModified":"2026-11-06T16:18:59.317","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions may allow attacker to information disclosure via remote unauthenticated attack"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiPAM Chrome Extension","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortipam_chrome_extension:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortipam_chrome_extension:8.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-22T14:42:52.073466Z","id":"CVE-2026-84388","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1021"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-168","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-104286","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-01T20:17:24.010","lastModified":"2026-10-28T20:09:29.257","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9, FortiMail 7.0 all versions may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-02T03:55:37.976071Z","id":"CVE-2026-104286","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-10-01","cisaActionDue":"2026-10-04","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Fortinet FortiMail Path Traversal Vulnerability","weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.9","matchCriteriaId":"6532EE04-8A43-4484-A566-B69D4D3717DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndIncluding":"7.2.9","matchCriteriaId":"4B2EC711-6ABD-43EC-8943-F88A6676B2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.9","matchCriteriaId":"789A925D-893D-4CB0-9E4E-6D63D4D3DFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"7.6.0","versionEndExcluding":"7.6.7","matchCriteriaId":"C8595B13-DAF0-48F9-9D79-44219F45F897"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.2","matchCriteriaId":"48330A5A-C76A-44A5-96CF-F6026DD3CEE1"}]}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-175","source":"psirt@fortinet.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104286","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2025-46773","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:11.940","lastModified":"2026-10-15T12:10:00.230","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11 may allow a low privileged user to execute arbitrary commands via crafted requests."},{"lang":"es","value":"Una vulnerabilidad de Neutralización incorrecta de elementos especiales utilizados en un comando SQL ('inyección SQL') [CWE-89] en Fortinet FortiAnalyzer versiones 7.6.0 hasta la 7.6.4 incluida, FortiAnalyzer versiones 7.4.0 hasta la 7.4.7 incluida, FortiAnalyzer 7.2 en todas sus versiones, FortiAnalyzer Cloud versiones 7.6.2 hasta la 7.6.4 incluida, FortiAnalyzer Cloud versiones 7.4.1 hasta la 7.4.7 incluida, FortiAnalyzer Cloud versiones 7.2.1 hasta la 7.2.11 incluida, podría permitir a un usuario con bajos privilegios ejecutar comandos arbitrarios mediante solicitudes manipuladas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-14T03:59:58.160301Z","id":"CVE-2025-46773","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-246","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2025-57739","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:12.100","lastModified":"2026-10-23T22:10:00.160","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An improper neutralization of special elements used in an SQL Command (\"SQL Injection\") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL [CWE-89] debido a una neutralización incorrecta de elementos especiales utilizados en un comando SQL ('SQL Injection') en Fortinet FortiMail versiones 7.6.0 hasta la 7.6.3 incluida, FortiMail versiones 7.4.0 hasta la 7.4.5 incluida, y FortiMail versiones 7.2.0 hasta la 7.2.8 incluida, permite a un atacante autenticado ejecutar código o comandos no autorizados mediante solicitudes HTTP o HTTPS específicamente diseñadas."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.3","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-14T03:59:57.452487Z","id":"CVE-2025-57739","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-184","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-106170","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:14.313","lastModified":"2026-10-16T16:16:57.047","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow  a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.2.0","lessThanOrEqual":"5.2.1","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.6","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-16T15:12:53.945122Z","id":"CVE-2026-106170","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-248"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-176","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-106171","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:14.443","lastModified":"2026-10-14T16:04:11.750","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-14T03:59:55.140791Z","id":"CVE-2026-106171","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-177","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-106172","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:14.567","lastModified":"2026-11-13T10:17:24.730","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requests"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.2.0","lessThanOrEqual":"5.2.1","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.6","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxcloud:5.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:4.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"5.2.0","lessThanOrEqual":"5.2.1","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThanOrEqual":"5.0.6","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-13T00:00:00+00:00","id":"CVE-2026-106172","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-321"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-179","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-106173","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:14.697","lastModified":"2026-11-10T20:17:32.393","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4 all versions, FortiSIEM 7.3 all versions, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions may allow attacker to execute unauthorized code or commands via specially crafted packets."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.5.0","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-13T00:00:00+00:00","id":"CVE-2026-106173","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-180","source":"psirt@fortinet.com"},{"url":"https://github.com/horizon3ai/CVE-2026-106173","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2026-106175","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:14.823","lastModified":"2026-11-10T13:18:19.470","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.8","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.13","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSwitch","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiswitch:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitch:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.10","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiProxy","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiproxy:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.23:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.22:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.21:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.20:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.19:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.18:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.17:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.16:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiproxy:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.14","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.16","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.23","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","baseScore":2.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":0.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-13T18:15:36.994341Z","id":"CVE-2026-106175","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-415"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-182","source":"psirt@fortinet.com"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-651988.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-106176","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:15.050","lastModified":"2026-10-14T16:04:11.750","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSIEM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisiem:7.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.7.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.5.0","lessThanOrEqual":"7.5.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.3.0","lessThanOrEqual":"7.3.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.7","versionType":"semver","status":"affected"},{"version":"7.1.0","lessThanOrEqual":"7.1.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.4","versionType":"semver","status":"affected"},{"version":"6.7.0","lessThanOrEqual":"6.7.10","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.5","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.3","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","baseScore":3.8,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-14T03:59:55.857050Z","id":"CVE-2026-106176","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-183","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-23705","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:23.320","lastModified":"2026-10-29T16:18:08.740","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.6, FortiAnalyzer 7.2.0 through 7.2.13, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-14T03:59:59.523275Z","id":"CVE-2026-23705","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-178","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-23706","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:23.463","lastModified":"2026-10-22T16:17:35.897","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.2.1 through 7.2.9, FortiManager 7.6.0 through 7.6.2, FortiManager 7.4.0 through 7.4.6 may allow a low privileged user to execute arbitrary commands via crafted requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-14T04:00:05.151344Z","id":"CVE-2026-23706","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-178","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-23707","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-13T18:17:23.590","lastModified":"2026-10-14T16:04:11.750","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4 may allow a low privileged user to execute arbitrary commands via crafted requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.2","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-14T03:59:42.502569Z","id":"CVE-2026-23707","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-178","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-107656","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-26T14:16:24.147","lastModified":"2026-10-27T04:17:40.280","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.6","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.9","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.6","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.9","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-26T00:00:00+00:00","id":"CVE-2026-107656","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-288"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-185","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-106174","sourceIdentifier":"psirt@fortinet.com","published":"2026-10-27T07:16:32.040","lastModified":"2026-11-10T13:18:19.303","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:8.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","status":"affected"},{"version":"7.6.4","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-27T10:13:16.314590Z","id":"CVE-2026-106174","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-667"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-181","source":"psirt@fortinet.com"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-127084.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-61625","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-10T20:17:20.203","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.0 through 7.2.11, FortiManager Cloud 7.6.0 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10 may allow an authenticated attacker whose profile only has read permission to write and delete files from the underlying filesystem via crafted HTTP or HTTPs requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiAnalyzer","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiManager Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.1","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.1","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-10T00:00:00+00:00","id":"CVE-2025-61625","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-190","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-121529","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-10T20:18:56.790","lastModified":"2026-11-13T05:18:13.657","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientMac","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientmac:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientmac:7.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindows:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.14","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiClientWindowsPAM","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientwindowspam:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientwindowspam:7.2.14:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.7","status":"affected"},{"version":"7.2.14","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-12T00:00:00+00:00","id":"CVE-2026-121529","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-346"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-194","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-121530","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-10T20:18:56.927","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper access control via an invalid token after entering a valid username and password"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-10T00:00:00+00:00","id":"CVE-2026-121530","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-195","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-26248","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-10T20:19:11.280","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to perform an XSS attack via social engineering and crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiSandbox","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandbox:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandbox:4.2.1:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.0","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"},{"version":"4.4.0","lessThanOrEqual":"4.4.8","versionType":"semver","status":"affected"},{"version":"4.2.1","lessThanOrEqual":"4.2.8","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox Cloud","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxcloud:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxcloud:5.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.4","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiSandbox PaaS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortisandboxpaas:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisandboxpaas:5.0.4:*:*:*:*:*:*:*"],"versions":[{"version":"5.0.4","lessThanOrEqual":"5.0.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-142","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126261","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-10T23:17:20.897","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiManager","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.7","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.5","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-285"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-275","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-121526","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:10.970","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to perform an open redirect attack via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiAuthenticator","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiauthenticator:6.5.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.3","versionType":"semver","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.6.10","versionType":"semver","status":"affected"},{"version":"6.5.0","lessThanOrEqual":"6.5.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-12T14:28:22.641639Z","id":"CVE-2026-121526","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-191","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-121527","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:11.113","lastModified":"2026-11-13T05:18:13.497","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientEMS","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.4.3","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"semver","status":"affected"},{"version":"7.2.12","lessThanOrEqual":"7.2.15","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-12T00:00:00+00:00","id":"CVE-2026-121527","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-250"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-192","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-121528","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:11.250","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.13 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","cpes":["cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.9","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.13","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.19","versionType":"semver","status":"affected"},{"version":"6.4.0","lessThanOrEqual":"6.4.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-193","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126144","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:11.400","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6, FortiMail 7.2 all versions, FortiRecorder 7.6.0 through 7.6.2, FortiRecorder 7.2.0 through 7.2.12, FortiRecorder 7.0.0 through 7.0.6, FortiVoice 8.0.0 through 8.0.1, FortiVoice 7.4.0 through 7.4.2, FortiVoice 7.2.0 through 7.2.5, FortiVoice 7.0.0 through 7.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","lessThanOrEqual":"7.6.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.12","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiVoice","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortivoice:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.2","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.5","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-196","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126145","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:11.580","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated administrator with system-time read-write access to execute unauthorized code or commands as root."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-197","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126146","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:11.720","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6, FortiMail 7.2.0 through 7.2.9, FortiRecorder 7.6.0, FortiRecorder 7.2.0 through 7.2.11, FortiRecorder 7.0.0 through 7.0.6 may allow an authenticated privileged attacker to execute unauthorized code or commands via a specifically crafted archive account configuration."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.4","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.6","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]},{"vendor":"Fortinet","product":"FortiRecorder","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortirecorder:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"7.6.0","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-198","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126147","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:11.880","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-199","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126148","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:12.010","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted HA join-request packets."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-200","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126149","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:12.137","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthenticated attacker to crash the daemon."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-201","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126150","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:12.543","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through 7.4.7, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to reset the password of an arbitrary IBE webmail user and take over their account via specially crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.5","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.7","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-640"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-202","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126151","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:12.720","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to gain elevation of privilege (account takeover) via a crafted request."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-303"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-203","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126152","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:12.877","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker to delete arbitrary directories as root, or to access or delete other users' calendar and mailbox data across tenant domains, via crafted HTTP requests to the webmail and administrative interfaces."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L","baseScore":7.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":2.3,"impactScore":4.7}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-639"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-204","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126153","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:13.050","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized commands via crafted requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-205","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126154","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:13.190","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A out-of-bounds write vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthenticated attacker to cause a denial of service via a specially crafted HTTP request."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-206","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126155","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:13.323","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to obtain an authenticated IBE webmail session as any IBE recipient and read or send their encrypted mail via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-207","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126156","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:13.450","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to take over an arbitrary IBE recipient account via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-639"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-208","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126157","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:13.587","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to gain access to other users' secure email accounts via crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"},{"version":"7.0.0","lessThanOrEqual":"7.0.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-209","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126158","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:13.723","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow an authenticated administrator to execute unauthorized code or commands as root via specially crafted HTTP requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-210","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126159","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:13.857","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release request."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-639"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-211","source":"psirt@fortinet.com"}]}},{"cve":{"id":"CVE-2026-126160","sourceIdentifier":"psirt@fortinet.com","published":"2026-11-11T22:17:13.990","lastModified":"2026-11-12T19:14:29.340","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to escalate privileges and release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release requests."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiMail","defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"],"versions":[{"version":"8.0.0","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"7.6.0","lessThanOrEqual":"7.6.6","versionType":"semver","status":"affected"},{"version":"7.4.0","lessThanOrEqual":"7.4.8","versionType":"semver","status":"affected"},{"version":"7.2.0","lessThanOrEqual":"7.2.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":4.2}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-212","source":"psirt@fortinet.com"}]}}]}